Non notée
CVE-2017-7546 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw…
Description
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| postgresql | Versions non publiées |
Références
- RHSA-2017:2728 access.redhat.com
- DSA-3936 www.debian.org
- RHSA-2017:2678 access.redhat.com
- RHSA-2017:2860 access.redhat.com
- 100278 www.securityfocus.com
- DSA-3935 www.debian.org
- 1039142 www.securitytracker.com
- www.postgresql.org www.postgresql.org
- GLSA-201710-06 security.gentoo.org
- RHSA-2017:2677 access.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de postgresql
Les 11 CVE de postgresql →
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change…
8.8
Élevée
CVE-2024-7348
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary…
8.8
Élevée
CVE-2024-24213
Supabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the component…
9.8
Critique
CVE-2019-10211
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL…
7.8
Élevée