Search CVE reports
1 – 10 of 185 results
Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or CREATE EXTENSION ......
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ... SET DATA TYPE primarily. Other DDL attack routes exist, such as "ALTER TABLE ... ADD...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type "any". Versions before PostgreSQL 18.7,...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Use of externally-controlled format string in PostgreSQL pg_basebackup allows an attacker having already compromised a server to achieve disclosure from pg_basebackup memory, via backup manifest bytes. The vulnerability does not...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view's base table, via iterated INSERT ... ON...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
External control of file name in PostgreSQL dblink and CREATE/ALTER SUBSCRIPTION allows a user to achieve persistent denial of service, via appending invalid data to a chosen file. Specifically, the "sslkeylogfile" connection...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the table to read every row despite row security policies, via iterated INSERT ... ON CONFLICT...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
SQL injection in PostgreSQL extension-script substitutions allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via a schema or owner name containing newlines or other...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Use after free in PostgreSQL pg_show_all_settings() allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Type confusion in PostgreSQL plpgsql record-field assignment allows an object creator to execute arbitrary code as the operating system user running the database, via a reentrant domain CHECK that changes a RECORD variable's row...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |