First published: Thu May 04 2017(Updated: )
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/postgresql | <9.2.21 | 9.2.21 |
redhat/postgresql | <9.3.17 | 9.3.17 |
redhat/postgresql | <9.4.12 | 9.4.12 |
redhat/postgresql | <9.5.7 | 9.5.7 |
redhat/postgresql | <9.6.3 | 9.6.3 |
PostgreSQL PostgreSQL | =8.4 | |
PostgreSQL PostgreSQL | =8.4.1 | |
PostgreSQL PostgreSQL | =8.4.2 | |
PostgreSQL PostgreSQL | =8.4.3 | |
PostgreSQL PostgreSQL | =8.4.4 | |
PostgreSQL PostgreSQL | =8.4.5 | |
PostgreSQL PostgreSQL | =8.4.6 | |
PostgreSQL PostgreSQL | =8.4.7 | |
PostgreSQL PostgreSQL | =8.4.8 | |
PostgreSQL PostgreSQL | =8.4.9 | |
PostgreSQL PostgreSQL | =8.4.10 | |
PostgreSQL PostgreSQL | =8.4.11 | |
PostgreSQL PostgreSQL | =8.4.12 | |
PostgreSQL PostgreSQL | =8.4.13 | |
PostgreSQL PostgreSQL | =8.4.14 | |
PostgreSQL PostgreSQL | =8.4.15 | |
PostgreSQL PostgreSQL | =8.4.16 | |
PostgreSQL PostgreSQL | =8.4.17 | |
PostgreSQL PostgreSQL | =8.4.18 | |
PostgreSQL PostgreSQL | =8.4.19 | |
PostgreSQL PostgreSQL | =8.4.20 | |
PostgreSQL PostgreSQL | =8.4.21 | |
PostgreSQL PostgreSQL | =8.4.22 | |
PostgreSQL PostgreSQL | =9.0 | |
PostgreSQL PostgreSQL | =9.0.1 | |
PostgreSQL PostgreSQL | =9.0.2 | |
PostgreSQL PostgreSQL | =9.0.3 | |
PostgreSQL PostgreSQL | =9.0.4 | |
PostgreSQL PostgreSQL | =9.0.5 | |
PostgreSQL PostgreSQL | =9.0.6 | |
PostgreSQL PostgreSQL | =9.0.7 | |
PostgreSQL PostgreSQL | =9.0.8 | |
PostgreSQL PostgreSQL | =9.0.9 | |
PostgreSQL PostgreSQL | =9.0.10 | |
PostgreSQL PostgreSQL | =9.0.11 | |
PostgreSQL PostgreSQL | =9.0.12 | |
PostgreSQL PostgreSQL | =9.0.13 | |
PostgreSQL PostgreSQL | =9.0.14 | |
PostgreSQL PostgreSQL | =9.0.15 | |
PostgreSQL PostgreSQL | =9.0.16 | |
PostgreSQL PostgreSQL | =9.0.17 | |
PostgreSQL PostgreSQL | =9.0.18 | |
PostgreSQL PostgreSQL | =9.0.19 | |
PostgreSQL PostgreSQL | =9.0.20 | |
PostgreSQL PostgreSQL | =9.0.21 | |
PostgreSQL PostgreSQL | =9.0.22 | |
PostgreSQL PostgreSQL | =9.0.23 | |
PostgreSQL PostgreSQL | =9.1 | |
PostgreSQL PostgreSQL | =9.1.1 | |
PostgreSQL PostgreSQL | =9.1.2 | |
PostgreSQL PostgreSQL | =9.1.3 | |
PostgreSQL PostgreSQL | =9.1.4 | |
PostgreSQL PostgreSQL | =9.1.5 | |
PostgreSQL PostgreSQL | =9.1.6 | |
PostgreSQL PostgreSQL | =9.1.7 | |
PostgreSQL PostgreSQL | =9.1.8 | |
PostgreSQL PostgreSQL | =9.1.9 | |
PostgreSQL PostgreSQL | =9.1.10 | |
PostgreSQL PostgreSQL | =9.1.11 | |
PostgreSQL PostgreSQL | =9.1.12 | |
PostgreSQL PostgreSQL | =9.1.13 | |
PostgreSQL PostgreSQL | =9.1.14 | |
PostgreSQL PostgreSQL | =9.1.15 | |
PostgreSQL PostgreSQL | =9.1.16 | |
PostgreSQL PostgreSQL | =9.1.17 | |
PostgreSQL PostgreSQL | =9.1.18 | |
PostgreSQL PostgreSQL | =9.1.19 | |
PostgreSQL PostgreSQL | =9.1.20 | |
PostgreSQL PostgreSQL | =9.1.21 | |
PostgreSQL PostgreSQL | =9.1.22 | |
PostgreSQL PostgreSQL | =9.1.23 | |
PostgreSQL PostgreSQL | =9.1.24 | |
PostgreSQL PostgreSQL | =9.2 | |
PostgreSQL PostgreSQL | =9.2.1 | |
PostgreSQL PostgreSQL | =9.2.2 | |
PostgreSQL PostgreSQL | =9.2.3 | |
PostgreSQL PostgreSQL | =9.2.4 | |
PostgreSQL PostgreSQL | =9.2.5 | |
PostgreSQL PostgreSQL | =9.2.6 | |
PostgreSQL PostgreSQL | =9.2.7 | |
PostgreSQL PostgreSQL | =9.2.8 | |
PostgreSQL PostgreSQL | =9.2.9 | |
PostgreSQL PostgreSQL | =9.2.10 | |
PostgreSQL PostgreSQL | =9.2.11 | |
PostgreSQL PostgreSQL | =9.2.12 | |
PostgreSQL PostgreSQL | =9.2.13 | |
PostgreSQL PostgreSQL | =9.2.14 | |
PostgreSQL PostgreSQL | =9.2.15 | |
PostgreSQL PostgreSQL | =9.2.16 | |
PostgreSQL PostgreSQL | =9.2.17 | |
PostgreSQL PostgreSQL | =9.2.18 | |
PostgreSQL PostgreSQL | =9.2.19 | |
PostgreSQL PostgreSQL | =9.2.20 | |
PostgreSQL PostgreSQL | =9.2.21 | |
PostgreSQL PostgreSQL | =9.3 | |
PostgreSQL PostgreSQL | =9.3.1 | |
PostgreSQL PostgreSQL | =9.3.2 | |
PostgreSQL PostgreSQL | =9.3.3 | |
PostgreSQL PostgreSQL | =9.3.4 | |
PostgreSQL PostgreSQL | =9.3.5 | |
PostgreSQL PostgreSQL | =9.3.6 | |
PostgreSQL PostgreSQL | =9.3.7 | |
PostgreSQL PostgreSQL | =9.3.8 | |
PostgreSQL PostgreSQL | =9.3.9 | |
PostgreSQL PostgreSQL | =9.3.10 | |
PostgreSQL PostgreSQL | =9.3.11 | |
PostgreSQL PostgreSQL | =9.3.12 | |
PostgreSQL PostgreSQL | =9.3.13 | |
PostgreSQL PostgreSQL | =9.3.14 | |
PostgreSQL PostgreSQL | =9.3.15 | |
PostgreSQL PostgreSQL | =9.3.16 | |
PostgreSQL PostgreSQL | =9.3.17 | |
PostgreSQL PostgreSQL | =9.4 | |
PostgreSQL PostgreSQL | =9.4.1 | |
PostgreSQL PostgreSQL | =9.4.2 | |
PostgreSQL PostgreSQL | =9.4.3 | |
PostgreSQL PostgreSQL | =9.4.4 | |
PostgreSQL PostgreSQL | =9.4.5 | |
PostgreSQL PostgreSQL | =9.4.6 | |
PostgreSQL PostgreSQL | =9.4.7 | |
PostgreSQL PostgreSQL | =9.4.8 | |
PostgreSQL PostgreSQL | =9.4.9 | |
PostgreSQL PostgreSQL | =9.4.10 | |
PostgreSQL PostgreSQL | =9.4.11 | |
PostgreSQL PostgreSQL | =9.4.12 | |
PostgreSQL PostgreSQL | =9.5 | |
PostgreSQL PostgreSQL | =9.5.1 | |
PostgreSQL PostgreSQL | =9.5.2 | |
PostgreSQL PostgreSQL | =9.5.3 | |
PostgreSQL PostgreSQL | =9.5.4 | |
PostgreSQL PostgreSQL | =9.5.5 | |
PostgreSQL PostgreSQL | =9.5.6 | |
PostgreSQL PostgreSQL | =9.5.7 | |
PostgreSQL PostgreSQL | =9.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.