Search CVE reports
31 – 40 of 185 results
Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmp_buf, via a tied Perl object, or a Perl object whose overloaded conversion throws while plperl is handling another error. We have not...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
SQL injection in PostgreSQL reindexdb allows an object creator to execute arbitrary SQL as the database user running reindexdb, via a crafted index name embedded in the parallel catalog query for --jobs with --index. Within major...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Use after free in PostgreSQL pltcl allows an object creator to execute arbitrary code as the operating system user running the database, via a domain CHECK that re-enters the Tcl interpreter and frees or changes a string still...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Improper locking in PostgreSQL startup processing allows an unauthenticated network client to trigger a server restart, via arranging for authentication_timeout to arrive while it holds a spinlock during cancel handling. Within...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Improper null termination in PostgreSQL array element assignment allows a database user to disclose server memory, via changing the final byte of a fixed-length name value to a nonzero byte and passing it to code that treats the...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via dropping the final reference to a Perl array or hash while PostgreSQL is converting that...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user running the database, via reentrant return_next() calls. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20,...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
SQL injection in PostgreSQL pg_dump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Improper protection of alternate path in PostgreSQL security-restricted operations allows an object creator to execute arbitrary SQL as the operation's caller, via a domain, enum, or range type created in pg_temp. The victim...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |