Description
The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | postgresql-8.3 | 8.3.11-0lenny1 | DSA-2051-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | postgresql +9 | 8.1.21-1.el5_5.1 | RHSA-2010:0429 |
| RHEL 5 | postgresql84 +11 | 8.4.4-1.el5_5.1 | RHSA-2010:0430 |
| RHEL 4 | postgresql +10 | 7.4.29-1.el4_8.1 | RHSA-2010:0428 |
| RHEL 3 | rh-postgresql +10 | 7.3.21-3 | RHSA-2010:0427 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | postgresql93 | 9.3.15-1.1 | openSUSE-SU-2024:10256-1 |
| openSUSE Tumbleweed | postgresql94 | 9.4.10-1.1 | openSUSE-SU-2024:10030-1 |
| openSUSE Tumbleweed | postgresql95 | 9.5.4-1.2 | openSUSE-SU-2024:10273-1 |
Advisories 8
- RHSA-2010:0429 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2010:0428 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2010:0430 Red Hat Security Advisory: postgresql84 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2010:0427 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- DSA-2051-1 postgresql-8.3 - several Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10030-1 postgresql94-9.4.10-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10273-1 libecpg6-32bit-9.5.4-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10256-1 postgresql93-9.3.15-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- http://www.postgresql.org/docs/current/static/release-8-1-21.html
- FEDORA-2010-8715 vendor-advisory
- http://www.postgresql.org/about/news.1203
- RHSA-2010:0427 vendor-advisory
- 1023987 vdb-entry
- RHSA-2010:0428 vendor-advisory
- HPSBMU02781 vendor-advisory
- DSA-2051 vendor-advisory
- 39898 third-party-advisory
- http://www.postgresql.org/docs/current/static/release-7-4-29.html
- 39820 third-party-advisory
- ADV-2010-1198 vdb-entry
- http://www.postgresql.org/docs/current/static/release-8-0-25.html
- ADV-2010-1167 vdb-entry
- ADV-2010-1221 vdb-entry
- 39845 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=583072
- 40215 vdb-entry
- http://www.postgresql.org/docs/current/static/release-8-3-11.html
- 64757 vdb-entry
- ADV-2010-1207 vdb-entry
- http://www.postgresql.org/docs/current/static/release-8-2-17.html
- RHSA-2010:0430 vendor-advisory
- http://www.postgresql.org/support/security
- FEDORA-2010-8696 vendor-advisory
- FEDORA-2010-8723 vendor-advisory
- http://www.postgresql.org/docs/current/static/release-8-4-4.html
- SUSE-SR:2010:014 vendor-advisory
- ADV-2010-1182 vdb-entry
- 39815 third-party-advisory
- RHSA-2010:0429 vendor-advisory
- MDVSA-2010:103 vendor-advisory
- [oss-security] 20100520 CVE-2010-1974 reject request (dupe of CVE-2010-1168) and CVE-2010-1447 description modification request mailing-list
- 39939 third-party-advisory
- oval:org.mitre.oval:def:10510 vdb-entry signature
- ADV-2010-1197 vdb-entry