Most recent entries from all

bdu:2017-02037

Withdrawn: BELL-CVE-2017-7547 — CVE-2017-7547 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-AB94931 — Security fixes in postgresql 9.6.4-r0

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Package postgresql version 9.6.4-r0 fixes 3 vulnerabilities: CVE-2017-7546, CVE-2017-7547, CVE-2017-7548

cnvd-2017-26578

EUVD-2026-176544

fkie_cve-2017-7547

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.

GHSA-gx5r-vvjw-c75c

gsd-2017-7547

RHSA-2017:2677 — Red Hat Security Advisory: rh-postgresql95-postgresql security update

postgresql: Empty password accepted in some authentication methods postgresql: pg_user_mappings view discloses passwords to users lacking server privileges postgresql: lo_put() function ignores ACLs

RHSA-2017:2728 — Red Hat Security Advisory: postgresql security update

postgresql: Empty password accepted in some authentication methods postgresql: pg_user_mappings view discloses passwords to users lacking server privileges

SUSE-SU-2017:2236-1 — Security update for postgresql93

Security update for postgresql93

UBUNTU-CVE-2017-7547

Affected: Ubuntu:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5