TI-2020-15711 CVE-2020-25695 · GHSA-xgxp-9x8p-gcw4
SQL injection in postgresql
Priority HIGH 68
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.
RHSA-2020:5664
postgresql:10 security update
Released 2020-12-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v. 8.0) postgresql-10.15-1.module+el8.0.0+9155+4a85661a.ppc64le::postgresql:10, postgresql-10.15-1.module+el8.0.0+9155+4a85661a.src::postgresql:10, postgresql-10.15-1.module+el8.0.0+9155+4a85661a.x86_64::postgresql:10 +24
Fixes 9 records
TI-2019-07485 CVE-2019-10164 · GHSA-gr34-mv2c-wc84
Stack-based buffer overflow in PostgreSQL
Priority MEDIUM 44
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow.
TI-2019-07528 CVE-2019-10208 · GHSA-7v5r-hqr9-r2x2
SQL injection in postgresql
Priority MEDIUM 42
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY…
TI-2020-15712 CVE-2020-25696 · GHSA-rfp5-6w27-jrq7
Incorrect comparison in PostgreSQL
Priority LOW 38
A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.
TI-2020-15710 CVE-2020-25694 · GHSA-vmm8-82m2-pcp5
Broken or risky cryptographic algorithm in postgresql
Priority LOW 38
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.
TI-2020-11220 CVE-2020-14349 · GHSA-2783-h34h-q54q
Uncontrolled search path in PostgreSQL
Priority LOW 36
It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication.
TI-2020-11221 CVE-2020-14350 · GHSA-6v9v-3f4c-cjgx
Untrusted search path in PostgreSQL
Priority LOW 33
It was found that some PostgreSQL extensions did not use search_path safely in their installation script.
TI-2020-01664 CVE-2020-1720 · GHSA-prcp-93mm-93fm
Improper authorization in Red Hat postgresql
Priority LOW 31
A flaw was found in PostgreSQL's "ALTER ...
TI-2019-07453 CVE-2019-10130 · GHSA-5rxr-v694-cxfj
Improper access control in postgresql
Priority LOW 22
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17.