TI-2019-07485 CVE-2019-10164 · GHSA-gr34-mv2c-wc84
Stack-based buffer overflow in PostgreSQL
Priority MEDIUM 44
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow.
RHSA-2020:3669
postgresql:10 security and bug fix update
Released 2020-09-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) postgresql-10.14-1.module+el8.2.0+7801+be0fed80.aarch64::postgresql:10, postgresql-10.14-1.module+el8.2.0+7801+be0fed80.ppc64le::postgresql:10, postgresql-10.14-1.module+el8.2.0+7801+be0fed80.s390x::postgresql:10 +47
Fixes 6 records
TI-2019-07528 CVE-2019-10208 · GHSA-7v5r-hqr9-r2x2
SQL injection in postgresql
Priority MEDIUM 42
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY…
TI-2020-11220 CVE-2020-14349 · GHSA-2783-h34h-q54q
Uncontrolled search path in PostgreSQL
Priority LOW 36
It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication.
TI-2020-11221 CVE-2020-14350 · GHSA-6v9v-3f4c-cjgx
Untrusted search path in PostgreSQL
Priority LOW 33
It was found that some PostgreSQL extensions did not use search_path safely in their installation script.
TI-2020-01664 CVE-2020-1720 · GHSA-prcp-93mm-93fm
Improper authorization in Red Hat postgresql
Priority LOW 31
A flaw was found in PostgreSQL's "ALTER ...
TI-2019-07453 CVE-2019-10130 · GHSA-5rxr-v694-cxfj
Improper access control in postgresql
Priority LOW 22
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17.