Medium WID-SEC-2025-1969 3 CVEs

PostgreSQL: Mehrere Schwachstellen

Published May 14, 2017 · Updated Oct 27, 2025 · Revision 10 · de-DE

Vendor: amazon Vendor: Debian Vendor: IBM Vendor: Red Hat Vendor: SUSE Product: Enterprise Linux Product: Linux Product: Linux 2 Product: Linux Jessie (8.0) Product: QRadar SIEM Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.

Product

PostgreSQL ist eine frei verfügbare Datenbank für unterschiedliche Betriebssysteme.

Vulnerabilities 3

Unscored —

CVE-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before …

The PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine

May 12, 2017
Unscored —

CVE-2017-7485

In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that t…

The PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine

May 12, 2017
Unscored —

CVE-2017-7486

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign serve…

The PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine

May 12, 2017

Revision history

2025-10-27 #10
Neue Updates von IBM aufgenommen
2025-09-04 #9
Neue Updates von Amazon aufgenommen
2017-08-07 #8
Added references
2017-08-02 #7
New remediations available
2017-07-05 #6
New remediations available
2017-07-04 #5
New remediations available
2017-06-26 #4
New remediations available
2017-05-30 #3
New remediations available
2017-05-14 #1
Initial Release
2017-05-14 #2
Version nicht vorhanden

References

PostgreSQL Security Update Release vom 2017-05-14
https://www.postgresql.org/about/news/1746/
Debian Security Advisory DSA-3851 vom 2017-05-14
https://www.debian.org/security/2017/dsa-3851
SUSE Security Update SUSE-SU-2017:1441-1 vom 2017-05-30
https://www.suse.com/support/update/announcement/2017/suse-su-20171441-1.html
SUSE Security Update SUSE-SU-2017:1690-1 vom 2017-06-26
https://www.suse.com/support/update/announcement/2017/suse-su-20171690-1.html
Red Hat Security Advisory RHSA-2017:1677 vom 2017-07-05
https://access.redhat.com/errata/RHSA-2017:1677
Red Hat Security Advisory RHSA-2017:1678 vom 2017-07-05
https://access.redhat.com/errata/RHSA-2017:1678
SUSE Security Update SUSE-SU-2017:1783-1 vom 2017-07-06
https://www.suse.com/support/update/announcement/2017/suse-su-20171783-1.html
RedHat Security Advisory: RHSA-2017:1983
https://access.redhat.com/errata/RHSA-2017:1983
RedHat Security Advisory RHSA-2017:2425
https://access.redhat.com/errata/RHSA-2017:2425
Amazon Linux Security Advisory ALAS2POSTGRESQL13-2025-012 vom 2025-09-04
https://alas.aws.amazon.com/AL2/ALAS2POSTGRESQL13-2025-012.html
Amazon Linux Security Advisory ALAS2POSTGRESQL14-2025-019 vom 2025-09-04
https://alas.aws.amazon.com/AL2/ALAS2POSTGRESQL14-2025-019.html
IBM Security Bulletin 7249276 vom 2025-10-27
https://www.ibm.com/support/pages/node/7249276