Most recent entries from all

bdu:2017-02038

Withdrawn: BELL-CVE-2017-7546 — CVE-2017-7546 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-AB94931 — Security fixes in postgresql 9.6.4-r0

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Package postgresql version 9.6.4-r0 fixes 3 vulnerabilities: CVE-2017-7546, CVE-2017-7547, CVE-2017-7548

cnvd-2017-26577

EUVD-2026-165705

fkie_cve-2017-7546

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

GHSA-cj69-7h9j-r3j5

gsd-2017-7546

RHSA-2017:2677 — Red Hat Security Advisory: rh-postgresql95-postgresql security update

postgresql: Empty password accepted in some authentication methods postgresql: pg_user_mappings view discloses passwords to users lacking server privileges postgresql: lo_put() function ignores ACLs

RHSA-2017:2728 — Red Hat Security Advisory: postgresql security update

postgresql: Empty password accepted in some authentication methods postgresql: pg_user_mappings view discloses passwords to users lacking server privileges

SUSE-SU-2017:2236-1 — Security update for postgresql93

Security update for postgresql93

UBUNTU-CVE-2017-7546

Affected: Ubuntu:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5