CVE-2006-2313
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and...
7.5 HighFix available
CVE-2006-2313 is a high vulnerability (CVSS 7.5) in Postgresql, published May 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.79%, the 86th percentile. Fixed in postgresql 7.4.7-6sarge2.
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
Exploit likelihood
2.79%Up 0.1 points since Feb 4, 2022
What each source reports
NVD Score used
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
- Record
CVE-2006-2313- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
- Record
CVE-2006-2313- Updated
- 2026-11-02
EUVDEUVD-2006-2314 No score
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
- Record
EUVD-2006-2314- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggvw-qxcq-2xgj No score
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and...
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
- Record
GHSA-ggvw-qxcq-2xgj- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresqlDebian:3.1 |
before 7.4.7-6sarge2, plus listed versions 7.4.7-6sarge1 |
7.4.7-6sarge2 |
rh-postgresqlRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
Show 87 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-postgresql-serverRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::as |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::es |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws |
before 0:7.3.15-2 | 0:7.3.15-2 |
postgresqlRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::as |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::es |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::ws |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
security.gentoo.org/glsa/glsa-200607-04.xml
secunia.com/advisories/20435
securityfocus.com/bid/18092
Show 42 moreShow less
postgresql.org/docs/techdocs.50
lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html
redhat.com/support/errata/RHSA-2006-0526.html
trustix.org/errata/2006/0032
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10618
vupen.com/english/advisories/2006/1941
usn.ubuntu.com/288-1
mandriva.com/security/advisories?name=MDKSA-2006:098
support.avaya.com/elmodocs2/security/ASA-2006-113.htm
exchange.xforce.ibmcloud.com/vulnerabilities/26627
archives.postgresql.org/pgsql-announce/2006-05/msg00010.php
securitytracker.com/id?1016142
ubuntu.com/usn/usn-288-2
debian.org/security/2006/dsa-1087
nvd.nist.gov/vuln/detail/CVE-2006-2313
github.com/advisories/GHSA-ggvw-qxcq-2xgj
access.redhat.com/errata/RHSA-2006:0526
bugzilla.redhat.com/show_bug.cgi?id=180536
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0526.json
cve.org/CVERecord?id=CVE-2006-0591