GCVE - cpe:2.3:a:postgresql:postgresql:8.3.13:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:8.3.13:*:*:*:*:*:*:*

part: a version: 8.3.13 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.067655
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.067657
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.067658
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.067659
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.067661
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.067662

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4422`	not_vulnerable	2026-06-08 05:04:36.113602	Details available SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message. Published: 2013-10-23T15:00:00.000Z Updated: 2024-08-06T16:45:13.900Z Open on db.gcve.eu Reference links http://quassel-irc.org/node/120 http://secunia.com/advisories/55194 http://secunia.com/advisories/55581 http://bugs.quassel-irc.org/issues/1244 http://seclists.org/oss-sec/2013/q4/74	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1903`	vulnerable	2026-06-08 05:03:57.160490	Details available PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors. Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:37.266Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1902`	vulnerable	2026-06-08 05:03:57.158770	Details available PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X." Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:36.302Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0255`	vulnerable	2026-06-08 05:03:46.530846	Details available PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read. Published: 2013-02-13T01:00:00.000Z Updated: 2024-08-06T14:18:09.608Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html http://www.debian.org/security/2013/dsa-2630 http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html http://www.postgresql.org/docs/8.4/static/release-8-4-16.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3488`	vulnerable	2026-06-08 05:02:10.169987	Details available The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue. Published: 2012-10-03T21:00:00.000Z Updated: 2024-08-06T20:05:12.671Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1263.html http://www.postgresql.org/docs/9.0/static/release-9-0-9.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:139 http://secunia.com/advisories/50636 https://bugzilla.redhat.com/show_bug.cgi?id=849172	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2655`	vulnerable	2026-06-08 05:02:05.199041	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0868`	vulnerable	2026-06-08 05:00:46.065362	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0866`	vulnerable	2026-06-08 05:00:46.042864	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4015`	vulnerable	2026-06-08 04:55:18.392261	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.