CVE-2007-2138
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x...
6.0 MediumFix available
CVE-2007-2138 is a medium vulnerability (CVSS 6.0) in Postgresql, published April 24, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.69%, the 89th percentile. Fixed in postgresql-8.1 8.1.9-0etch1.
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
Exploit likelihood
3.69%Up 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
- Record
CVE-2007-2138- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
- Record
CVE-2007-2138- Updated
- 2026-11-02
EUVDEUVD-2007-2133 No score
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
- Record
EUVD-2007-2133- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2hq5-m4w6-6x9c No score
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x...
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
- Record
GHSA-2hq5-m4w6-6x9c- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-8.1Debian:4.0 |
before 8.1.9-0etch1, plus listed versions 8.1.8-18.1.8-2 |
8.1.9-0etch1 |
postgresql-7.4Debian:4.0 |
before 1:7.4.17-0etch1, plus listed versions 1:7.4.16-1 |
1:7.4.17-0etch1 |
postgresqlDebian:3.1 |
before 7.4.7-6sarge5, plus listed versions 7.4.7-6sarge17.4.7-6sarge27.4.7-6sarge37.4.7-6sarge4 |
7.4.7-6sarge5 |
rh-postgresqlRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
Show 124 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-postgresql-plRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::as |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresqlRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::es |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresqlRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws |
before 0:7.3.19-1 | 0:7.3.19-1 |
postgresqlRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::as |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::es |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::ws |
before 0:7.4.17-1.RHEL4.1 | 0:7.4.17-1.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-develRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-plRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-serverRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-testRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresqlRed Hat:enterprise_linux:5::client |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-contribRed Hat:enterprise_linux:5::client |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-docsRed Hat:enterprise_linux:5::client |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-libsRed Hat:enterprise_linux:5::client |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-pythonRed Hat:enterprise_linux:5::client |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-tclRed Hat:enterprise_linux:5::client |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresqlRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-contribRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-debuginfoRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-develRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-docsRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-libsRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-plRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-pythonRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-serverRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-tclRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresql-testRed Hat:enterprise_linux:5::server |
before 0:8.1.9-1.el5 | 0:8.1.9-1.el5 |
postgresqlRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-contribRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-debuginfoRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-develRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-docsRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-libsRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-plRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-pythonRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-serverRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-tclRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
postgresql-testRed Hat:rhel_application_stack:1 |
before 0:8.1.9-1.el4s1.1 | 0:8.1.9-1.el4s1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, facts, references, title | GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
secunia.com/advisories/25334
trustix.org/errata/2007/0015
postgresql.org/about/news.791
security.gentoo.org/glsa/glsa-200705-12.xml
Show 37 moreShow less
mandriva.com/security/advisories?name=MDKSA-2007:094
issues.rpath.com/browse/RPL-1292
securityfocus.com/bid/23618
support.avaya.com/elmodocs2/security/ASA-2007-190.htm
redhat.com/support/errata/RHSA-2007-0337.html
securitytracker.com/id?1017974
exchange.xforce.ibmcloud.com/vulnerabilities/33842
debian.org/security/2007/dsa-1311
vupen.com/english/advisories/2007/1549
ubuntu.com/usn/usn-454-1
rhn.redhat.com/errata/RHSA-2007-0336.html
sunsolve.sun.com/search/document.do?assetkey=1-26-102894-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10090
nvd.nist.gov/vuln/detail/CVE-2007-2138
github.com/advisories/GHSA-2hq5-m4w6-6x9c
access.redhat.com/errata/RHSA-2007:0336
bugzilla.redhat.com/show_bug.cgi?id=237680
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0336.json
cve.org/CVERecord?id=CVE-2007-2138