CVE-2016-5423
High · 8.3CVSS
8.3
EPSS
6.0%
Published
Dec 9, 2016
CISA due date
—
Cloudanix analysis
A problem in older PostgreSQL database software lets people who already have login access crash the database or potentially run harmful code.
- Exploitation
- Remote Authenticated
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Remote Code Execution
- Component
- Network Service
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Remote authenticated users can trigger NULL pointer dereference in CASE expression handling or SQL function inlining, causing server crash, memory disclosure, or arbitrary code execution due to memory corruption.
Why it matters to the business
Attackers with database credentials can crash production PostgreSQL instances leading to service outages, leak sensitive data from memory, or gain code execution on database servers, potentially affecting thousands of dependent applications given widespread PostgreSQL usage.
How an attack unfolds
An attacker authenticates to a vulnerable PostgreSQL instance and submits specially crafted queries containing nested CASE expressions or inlined SQL functions that compare values of differing types, triggering the memory corruption path to crash the server or escalate to code execution.
How to fix it
Upgrade PostgreSQL to versions 9.1.23, 9.2.18, 9.3.14, 9.4.9, or 9.5.4 or later; apply vendor patches immediately given the age of the vulnerability and stable exploitation probability.
How to confirm the fix worked
Verify PostgreSQL server version is at or above the fixed releases listed; test connectivity and query execution post-upgrade to confirm absence of crashes on similar CASE patterns.
Typical attack path
- Obtain valid database credentials on target PostgreSQL server
- Craft malicious query using CASE expressions or equality operators across type boundaries
- Submit query via client connection to trigger NULL dereference
- Observe crash or leverage memory corruption for information disclosure or code execution
How to detect it
Examine PostgreSQL server logs for repeated crashes, NULL pointer dereference errors, or unexpected memory access issues around query execution; review audit logs for suspicious CASE expression or function inlining patterns from authenticated sessions.
What your security team should do
- Prioritize upgrade of all PostgreSQL instances to fixed versions without delay
- Review database access controls to limit authenticated users
- Enable query logging and monitor for anomalous CASE or function usage
- Test upgrades in staging environments before production rollout
The record
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:7 | postgresql-9.1 | 0 | 9.1.23-0+deb7u1 |
| Debian:8 | postgresql-9.4 | 0 | 9.4.9-0+deb8u1 |
| Mageia:5 | postgresql9.3 | 0 | 9.3.14-1.mga5 |
| Mageia:5 | postgresql9.4 | 0 | 9.4.9-1.mga5 |
| Red Hat:enterprise_linux:7::client | postgresql | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-contrib | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-debuginfo | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-devel | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-docs | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-libs | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-plperl | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-plpython | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-pltcl | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-server | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-test | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::client | postgresql-upgrade | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-contrib | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-debuginfo | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-devel | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-docs | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-libs | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-plperl | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-plpython | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-pltcl | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-server | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-test | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::computenode | postgresql-upgrade | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-contrib | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-debuginfo | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-devel | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-docs | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-libs | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-plperl | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-plpython | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-pltcl | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-server | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-test | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::server | postgresql-upgrade | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-contrib | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-debuginfo | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-devel | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-docs | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-libs | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-plperl | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-plpython | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-pltcl | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-server | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-test | 0 | 0:9.2.18-1.el7 |
| Red Hat:enterprise_linux:7::workstation | postgresql-upgrade | 0 | 0:9.2.18-1.el7 |
| Red Hat:network_satellite:5.7::el6 | rh-postgresql95-postgresql | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite:5.7::el6 | rh-postgresql95-postgresql-contrib | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite:5.7::el6 | rh-postgresql95-postgresql-debuginfo | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite:5.7::el6 | rh-postgresql95-postgresql-libs | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite:5.7::el6 | rh-postgresql95-postgresql-pltcl | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite:5.7::el6 | rh-postgresql95-postgresql-server | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite:5.7::el6 | rh-postgresql95-runtime | 0 | 0:2.2-3.el6 |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-app | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-applet | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-config-files | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-config-files-common | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-config-files-tool | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-iss | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-iss-export | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-libs | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-package-push-server | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-server | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-sql | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-sql-oracle | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-sql-postgresql | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-tools | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-xml-export-libs | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-backend-xmlrpc | 0 | 0:2.3.3-53.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-base | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-base-minimal | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-base-minimal-config | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-dobby | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-grail | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-html | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-postgresql-server | 0 | 0:9.5-1.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-pxt | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-setup-postgresql | 0 | 0:2.3.0-27.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-sniglets | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-utils | 0 | 0:2.3.2-32.el6sat |
| Red Hat:network_satellite:5.7::el6 | spacewalk-web | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | rh-postgresql95-postgresql | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite_managed_db:5.7::el6 | rh-postgresql95-postgresql-contrib | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite_managed_db:5.7::el6 | rh-postgresql95-postgresql-debuginfo | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite_managed_db:5.7::el6 | rh-postgresql95-postgresql-libs | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite_managed_db:5.7::el6 | rh-postgresql95-postgresql-pltcl | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite_managed_db:5.7::el6 | rh-postgresql95-postgresql-server | 0 | 0:9.5.7-2.el6 |
| Red Hat:network_satellite_managed_db:5.7::el6 | rh-postgresql95-runtime | 0 | 0:2.2-3.el6 |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-base | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-base-minimal | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-base-minimal-config | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-dobby | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-grail | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-html | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-postgresql-server | 0 | 0:9.5-1.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-pxt | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-setup-postgresql | 0 | 0:2.3.0-27.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-sniglets | 0 | 0:2.3.2-35.el6sat |
| Red Hat:network_satellite_managed_db:5.7::el6 | spacewalk-web | 0 | 0:2.3.2-35.el6sat |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-contrib | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-debuginfo | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-devel | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-docs | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-libs | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-plperl | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-plpython | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-pltcl | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-server | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-test | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | postgresql92-postgresql-upgrade | 0 | 0:9.2.18-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-contrib | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-debuginfo | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-devel | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-docs | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-libs | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-plperl | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-plpython | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-pltcl | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-server | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-static | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-test | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql94-postgresql-upgrade | 0 | 0:9.4.9-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-contrib | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-debuginfo | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-devel | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-docs | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-libs | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-plperl | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-plpython | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-pltcl | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-server | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-static | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-postgresql95-postgresql-test | 0 | 0:9.5.4-1.el6 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-contrib | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-debuginfo | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-devel | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-docs | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-libs | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-plperl | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-plpython | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-pltcl | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-server | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-test | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | postgresql92-postgresql-upgrade | 0 | 0:9.2.18-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-contrib | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-debuginfo | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-devel | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-docs | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-libs | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-plperl | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-plpython | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-pltcl | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-server | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-static | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-test | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql94-postgresql-upgrade | 0 | 0:9.4.9-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-contrib | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-debuginfo | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-devel | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-docs | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-libs | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-plperl | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-plpython | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-pltcl | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-server | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-static | 0 | 0:9.5.4-1.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-postgresql95-postgresql-test | 0 | 0:9.5.4-1.el7 |
| SUSE:Linux Enterprise Desktop 12 SP1 | postgresql94 | 0 | 9.4.9-14.1 |
| SUSE:Linux Enterprise Desktop 12 SP1 | postgresql94-libs | 0 | 9.4.9-14.1 |
| SUSE:Linux Enterprise Server 11 SP4 | postgresql94 | 0 | 9.4.9-0.19.1 |
| SUSE:Linux Enterprise Server 11 SP4 | postgresql94-libs | 0 | 9.4.9-0.19.1 |
| SUSE:Linux Enterprise Server 12 SP1 | postgresql94 | 0 | 9.4.9-14.1 |
| SUSE:Linux Enterprise Server 12 SP1 | postgresql94-libs | 0 | 9.4.9-14.1 |
| SUSE:Linux Enterprise Server 12-LTSS | postgresql93 | 0 | 9.3.14-19.2 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | postgresql94 | 0 | 9.4.9-0.19.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | postgresql94-libs | 0 | 9.4.9-0.19.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | postgresql93 | 0 | 9.3.14-19.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | postgresql94 | 0 | 9.4.9-14.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | postgresql94-libs | 0 | 9.4.9-14.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | postgresql94-libs | 0 | 9.4.9-0.19.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP1 | postgresql94-libs | 0 | 9.4.9-14.1 |
| SUSE:Manager 2.1 | postgresql94 | 0 | 9.4.9-0.19.1 |
| Ubuntu:14.04:LTS | postgresql-9.1 | 0 | 9.1.23-0ubuntu0.14.04 |
| Ubuntu:14.04:LTS | postgresql-9.3 | 0 | 9.3.14-0ubuntu0.14.04 |
| Ubuntu:16.04:LTS | postgresql-9.5 | 0 | 9.5.4-0ubuntu0.16.04 |
| openSUSE:Tumbleweed | postgresql93 | 0 | 9.3.15-1.1 |
| openSUSE:Tumbleweed | postgresql94 | 0 | 9.4.10-1.1 |
Related vulnerabilities
- CVE-2014-8161 PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6… Also affects postgresql-9.1
- CVE-2017-7546 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to… Also affects postgresql-9.1
- CVE-2016-0766 PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6… Also affects postgresql-9.1
- CVE-2015-5288 The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19… Also affects postgresql-9.1
- CVE-2015-3165 Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before… Also affects postgresql-9.1
- CVE-2013-1899 Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9… Also affects postgresql-9.1
- CVE-2017-15098 Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL… Also affects postgresql-9.4
- CVE-2026-112405 Pillow is a Python imaging library. CWE-476