Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3390-1
HistoryAug 15, 2017 - 12:00 a.m.

PostgreSQL vulnerabilities

2017-08-1500:00:00
ubuntu.com
42

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

9.5 High

AI Score

Confidence

High

0.28 Low

EPSS

Percentile

96.9%

JSON

Releases

  • Ubuntu 17.04
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • postgresql-9.3 - Object-relational SQL database
  • postgresql-9.5 - Object-relational SQL database
  • postgresql-9.6 - object-relational SQL database

Details

Ben de Graaff, Jelte Fennema, and Jeroen van der Ham discovered that
PostgreSQL allowed the use of empty passwords in some authentication
methods, contrary to expected behaviour. A remote attacker could use an
empty password to authenticate to servers that were believed to have
password login disabled. (CVE-2017-7546)

Jeff Janes discovered that PostgreSQL incorrectly handled the
pg_user_mappings catalog view. A remote attacker without server privileges
could possibly use this issue to obtain certain passwords. (CVE-2017-7547)

Chapman Flack discovered that PostgreSQL incorrectly handled lo_put()
permissions. A remote attacker could possibly use this issue to change the
data in a large object. (CVE-2017-7548)

OSVersionArchitecturePackageVersionFilename
Ubuntu17.04noarchpostgresql-9.6< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibecpg-compat3< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibecpg-compat3-dbgsym< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibecpg-dev< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibecpg-dev-dbgsym< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibecpg6< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibecpg6-dbgsym< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibpgtypes3< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibpgtypes3-dbgsym< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Ubuntu17.04noarchlibpq-dev< 9.6.4-0ubuntu0.17.04.1UNKNOWN
Rows per page:
1-10 of 891

Related

freebsd 1
nessus 35
openvas 26
redhat 4
debian 3
osv 6
suse 8
amazon 3
fedora 3
mageia 1
archlinux 1
kaspersky 2
oraclelinux 2
centos 2
gentoo 1
nvd 3
postgresql 3
checkpoint_advisories 1
veracode 3
debiancve 3
prion 3
redhatcve 3
ubuntucve 3
alpinelinux 3
cvelist 3
cve 3
altlinux 12
ibm 2
freebsd
freebsd
PostgreSQL vulnerabilities
2017-08-10 00:00:00
nessus
nessus
Debian DSA-3935-1 : postgresql-9.4 - security update
2017-08-14 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : PostgreSQL vulnerabilities (USN-3390-1)
2017-08-16 00:00:00
openSUSE Security Update : postgresql94 (openSUSE-2017-1020)
2017-09-13 00:00:00
openvas
openvas
openSUSE: Security Advisory for postgresql93 (openSUSE-SU-2017:2306-1)
2017-08-31 00:00:00
openSUSE: Security Advisory for postgresql94 (openSUSE-SU-2017:2392-1)
2017-09-09 00:00:00
Mageia: Security Advisory (MGASA-2017-0316)
2022-01-28 00:00:00
redhat
redhat
(RHSA-2017:2677) Moderate: rh-postgresql95-postgresql security update
2017-09-12 07:28:36
(RHSA-2017:2678) Moderate: rh-postgresql94-postgresql security update
2017-09-12 09:43:02
(RHSA-2017:2728) Moderate: postgresql security update
2017-09-14 05:55:22
debian
debian
[SECURITY] [DSA 3936-1] postgresql-9.6 security update
2017-08-10 21:17:25
[SECURITY] [DSA 3935-1] postgresql-9.4 security update
2017-08-10 21:16:19
[SECURITY] [DLA 1051-1] postgresql-9.1 security update
2017-08-10 23:35:39
osv
osv
postgresql-9.6 - security update
2017-08-10 00:00:00
postgresql-9.4 - security update
2017-08-10 00:00:00
postgresql-9.1 - security update
2017-08-10 00:00:00
suse
suse
Security update for postgresql93 (important)
2017-08-22 21:11:25
Security update for postgresql94 (important)
2017-09-08 18:31:32
Security update for postgresql94 (important)
2017-08-25 18:18:34
amazon
amazon
Medium: postgresql94, postgresql95
2017-08-31 16:22:00
Medium: postgresql93, postgresql92
2017-08-31 16:20:00
Medium: postgresql96
2017-10-06 16:51:00
fedora
fedora
[SECURITY] Fedora 26 Update: postgresql-9.6.4-1.fc26
2017-08-14 21:54:56
[SECURITY] Fedora 25 Update: postgresql-9.5.8-1.fc25
2017-08-29 20:25:47
[SECURITY] Fedora 26 Update: mingw-postgresql-9.6.4-1.fc26
2017-08-20 18:35:35
mageia
mageia
Updated postgresql9.3/4/6 packages fix security vulnerabilities
2017-08-28 11:14:39
archlinux
archlinux
[ASA-201709-2] postgresql: multiple issues
2017-09-06 00:00:00
kaspersky
kaspersky
KLA11091 Multiple vulnerabilities in PostgreSQL
2017-08-10 00:00:00
KLA11092 Denial of service vulnerability in PostgreSQL
2017-08-10 00:00:00
oraclelinux
oraclelinux
postgresql security update
2017-09-14 00:00:00
postgresql security update
2017-10-05 00:00:00
centos
centos
postgresql security update
2017-09-14 23:01:46
postgresql security update
2017-10-06 13:53:23
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2017-10-08 00:00:00
nvd
nvd
CVE-2017-7546
2017-08-16 18:29:00
CVE-2017-7548
2017-08-16 18:29:00
CVE-2017-7547
2017-08-16 18:29:00
postgresql
postgresql
Vulnerability in core server (CVE-2017-7546)
2017-08-16 18:29:00
Vulnerability in core server (CVE-2017-7548)
2017-08-16 18:29:00
Vulnerability in core server (CVE-2017-7547)
2017-08-16 18:29:00
checkpoint_advisories
checkpoint_advisories
PostgreSQL Database Core Server non-libpq Client Policy Bypass (CVE-2017-7546)
2017-08-29 00:00:00
veracode
veracode
Authentication Bypass
2019-01-15 09:19:36
Denial Of Service (DoS)
2019-05-16 01:42:35
Privilege Escalation
2019-05-16 01:42:35
debiancve
debiancve
CVE-2017-7546
2017-08-16 18:29:00
CVE-2017-7548
2017-08-16 18:29:00
CVE-2017-7547
2017-08-16 18:29:00
prion
prion
Authentication flaw
2017-08-16 18:29:00
Authorization
2017-08-16 18:29:00
Authorization
2017-08-16 18:29:00
redhatcve
redhatcve
CVE-2017-7546
2019-10-10 03:58:16
CVE-2017-7548
2017-08-10 15:34:12
CVE-2017-7547
2017-08-10 15:34:28
ubuntucve
ubuntucve
CVE-2017-7546
2017-08-10 00:00:00
CVE-2017-7548
2017-08-10 00:00:00
CVE-2017-7547
2017-08-10 00:00:00
alpinelinux
alpinelinux
CVE-2017-7546
2017-08-16 18:29:00
CVE-2017-7548
2017-08-16 18:29:00
CVE-2017-7547
2017-08-16 18:29:00
cvelist
cvelist
CVE-2017-7546
2017-08-10 00:00:00
CVE-2017-7548
2017-08-10 00:00:00
CVE-2017-7547
2017-08-10 00:00:00
cve
cve
CVE-2017-7546
2017-08-16 18:29:00
CVE-2017-7548
2017-08-16 18:29:00
CVE-2017-7547
2017-08-16 18:29:00
altlinux
altlinux
Security fix for the ALT Linux 7 package postgresql9.4 version 9.4.13-alt0.M70P.1
2017-08-09 00:00:00
Security fix for the ALT Linux 8 package postgresql12 version 9.6.4-alt1
2017-08-09 00:00:00
Security fix for the ALT Linux 7 package postgresql9.5 version 9.5.8-alt0.M70P.1
2017-08-09 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by Open Source packages vulnerabilities
2018-06-16 22:04:22
Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Access Manager Appliance
2019-06-21 20:05:01

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

9.5 High

AI Score

Confidence

High

0.28 Low

EPSS

Percentile

96.9%

JSON
Related for USN-3390-1
freebsd1nessus35openvas26redhat4debian3osv6suse8amazon3fedora3mageia1archlinux1kaspersky2oraclelinux2centos2gentoo1nvd3postgresql3checkpoint_advisories1veracode3debiancve3prion3redhatcve3ubuntucve3alpinelinux3cvelist3cve3altlinux12ibm2