GCVE - cpe:2.3:a:postgresql:postgresql:8.3.20:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:8.3.20:*:*:*:*:*:*:*

part: a version: 8.3.20 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.067719
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.067720
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.067721
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.067723
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.067724
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.067725

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4422`	not_vulnerable	2026-06-08 05:04:36.117543	Details available SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message. Published: 2013-10-23T15:00:00.000Z Updated: 2024-08-06T16:45:13.900Z Open on db.gcve.eu Reference links http://quassel-irc.org/node/120 http://secunia.com/advisories/55194 http://secunia.com/advisories/55581 http://bugs.quassel-irc.org/issues/1244 http://seclists.org/oss-sec/2013/q4/74	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1903`	vulnerable	2026-06-08 05:03:57.160604	Details available PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors. Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:37.266Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1902`	vulnerable	2026-06-08 05:03:57.158886	Details available PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X." Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:36.302Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0255`	vulnerable	2026-06-08 05:03:46.535107	Details available PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read. Published: 2013-02-13T01:00:00.000Z Updated: 2024-08-06T14:18:09.608Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html http://www.debian.org/security/2013/dsa-2630 http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html http://www.postgresql.org/docs/8.4/static/release-8-4-16.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.