postgresql

5 results · Clear filters · Feed

• Low 3.1
  CVE-2023-39418

  Postgresql: merge fails to enforce update or select row security policies

  A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user coul…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Alpine
  Aug 11, 2023
• Low 3.7
  CVE-2022-41862

  In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos …

  postgresql15 postgresql-12 postgresql-14 postgresql-15 Debian Ubuntu Alpine
  Mar 3, 2023
• Low 3.1
  CVE-2020-1720

  A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…

  Red Hat postgresql postgresql15 postgresql-10 Ubuntu Alpine
  Mar 17, 2020
• Low 3.1
  CVE-2019-10209

  Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.

  PostgreSQL postgresql postgresql15 postgresql14 Alpine
  Oct 29, 2019
• Low 3.1
  CVE-2019-10130

  A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, exc…

  PostgreSQL Project postgresql postgresql15 postgresql-9.5 Ubuntu Alpine
  Jul 30, 2019