Most recent entries from all

bdu:2019-04174

Withdrawn: BELL-CVE-2017-7485 — CVE-2017-7485 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-FW42039 — vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secur…

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.

cnvd-2017-06931

EUVD-2026-74729

fkie_cve-2017-7485

In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.

GHSA-742m-4pjq-x8qf

gsd-2017-7485

RHSA-2017:1677 — Red Hat Security Advisory: rh-postgresql95-postgresql security update

postgresql: Selectivity estimators bypass SELECT privilege checks postgresql: libpq ignores PGREQUIRESSL environment variable postgresql: pg_user_mappings view discloses foreign server passwords

SUSE-SU-2017:1441-1 — Security update for postgresql93

Security update for postgresql93

UBUNTU-CVE-2017-7485

Affected: Ubuntu:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5

WID-SEC-W-2025-1969 — PostgreSQL: Mehrere Schwachstellen

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.