PostgreSQL 8.3.19
Approved changes feed: RSS · Atom
cpe:2.3:a:postgresql:postgresql:8.3.19:*:*:*:*:*:*:*
part: a version: 8.3.19 update: *
| Vendor | Postgresql (17ae1743-f0f5-50ae-b0e9-670248233cae) |
|---|---|
| Product | Postgresql (cce58cf9-95f4-56e0-85d7-e79aa6a78bc7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/postgresql |
purl2cpe | 2026-06-01 10:12:17.067703 |
pkg:deb/ubuntu/postgresql |
purl2cpe | 2026-06-01 10:12:17.067704 |
pkg:docker/postgres |
purl2cpe | 2026-06-01 10:12:17.067706 |
pkg:github/postgres/postgres |
purl2cpe | 2026-06-01 10:12:17.067707 |
pkg:gitlab/redhat/postgresql |
purl2cpe | 2026-06-01 10:12:17.067708 |
pkg:rpm/fedora/postgresql |
purl2cpe | 2026-06-01 10:12:17.067710 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4422 |
not_vulnerable | 2026-06-08 05:04:36.116979 |
Details available
SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message.
Published: 2013-10-23T15:00:00.000Z
Updated: 2024-08-06T16:45:13.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1903 |
vulnerable | 2026-06-08 05:03:57.160588 |
Details available
PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors.
Published: 2013-04-04T17:00:00.000Z
Updated: 2024-08-06T15:20:37.266Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1902 |
vulnerable | 2026-06-08 05:03:57.158869 |
Details available
PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."
Published: 2013-04-04T17:00:00.000Z
Updated: 2024-08-06T15:20:36.302Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0255 |
vulnerable | 2026-06-08 05:03:46.534425 |
Details available
PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.
Published: 2013-02-13T01:00:00.000Z
Updated: 2024-08-06T14:18:09.608Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3488 |
vulnerable | 2026-06-08 05:02:10.172456 |
Details available
The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.
Published: 2012-10-03T21:00:00.000Z
Updated: 2024-08-06T20:05:12.671Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.