CVE-2009-3229
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...
CVE-2009-3229 is a medium vulnerability (CVSS 4.0) in Postgresql, published September 17, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. Fixed in postgresql-7.4 1:7.4.26-0etch1.
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
Exploit likelihood
What each source reports
NVD Score used
4.0
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
- Record
CVE-2009-3229- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
- Record
CVE-2009-3229- Updated
- 2026-11-02
EUVDEUVD-2009-3212 No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
- Record
EUVD-2009-3212- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j8v8-w66x-xw2w No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
- Record
GHSA-j8v8-w66x-xw2w- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-7.4Debian:4.0 |
before 1:7.4.26-0etch1, plus listed versions 1:7.4.16-11:7.4.17-0etch11:7.4.17-11:7.4.19-0etch11:7.4.23-0etch1 |
1:7.4.26-0etch1 |
postgresql-8.1Debian:4.0 |
before 8.1.18-0etch1, plus listed versions 8.1.10-0etch18.1.10-18.1.11-0etch18.1.11-18.1.13-0etch1 Show 7 moreShow less8.1.15-0etch18.1.17-0etch18.1.8-18.1.8-28.1.9-0etch18.1.9-0etch28.1.9-1 |
8.1.18-0etch1 |
postgresql-8.3Debian:5.0 |
before 8.3.8-0lenny1, plus listed versions 8.3.5-18.3.5-28.3.6-18.3.6-1~bpo40+18.3.7-0lenny1 Show 7 moreShow less8.3.7-0lenny1~bpo40+18.3.7-18.3.7-28.3.7-38.3.7-48.3.8-0lenny1~bpo40+18.3.8-0lenny1~bpo40+2 |
8.3.8-0lenny1 |
httpdRed Hat:rhel_application_stack:2 |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 |
before 1:2.2.13-2.el5s2 | 1:2.2.13-2.el5s2 |
mysqlRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-clusterRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
phpRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-cliRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-commonRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-develRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-gdRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-imapRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pearRed Hat:rhel_application_stack:2 |
before 1:1.8.1-2.el5s2 | 1:1.8.1-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-soapRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.redhat.com/show_bug.cgi?id=522092
redhat.com/archives/fedora-package-announce/2009-September/msg00307.html
postgresql.org/docs/8.3/static/release-8-3-8.html
securityfocus.com/bid/36314
marc.info?l=bugtraq&m=134124585221119&w=2
secunia.com/advisories/36837
Show 47 moreShow less
postgresql.org/support/security.html
secunia.com/advisories/36660
securityfocus.com/archive/1/509917/100/0/threaded
secunia.com/advisories/36800
us.debian.org/security/2009/dsa-1900
redhat.com/archives/fedora-package-announce/2009-September/msg00305.html
lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
secunia.com/advisories/36727
lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
ubuntu.com/usn/usn-834-1
wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
nvd.nist.gov/vuln/detail/CVE-2009-3229
github.com/advisories/GHSA-j8v8-w66x-xw2w
access.redhat.com/errata/RHSA-2009:1461
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=466518
bugzilla.redhat.com/show_bug.cgi?id=506896
bugzilla.redhat.com/show_bug.cgi?id=511020
bugzilla.redhat.com/show_bug.cgi?id=521619
bugzilla.redhat.com/show_bug.cgi?id=522084
bugzilla.redhat.com/show_bug.cgi?id=522085
bugzilla.redhat.com/show_bug.cgi?id=522209
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1461.json
access.redhat.com/security/cve/CVE-2008-4456
cve.org/CVERecord?id=CVE-2008-4456
nvd.nist.gov/vuln/detail/CVE-2008-4456
access.redhat.com/security/cve/CVE-2009-2446
cve.org/CVERecord?id=CVE-2009-2446
nvd.nist.gov/vuln/detail/CVE-2009-2446
access.redhat.com/security/cve/CVE-2009-2687
cve.org/CVERecord?id=CVE-2009-2687
nvd.nist.gov/vuln/detail/CVE-2009-2687
access.redhat.com/security/cve/CVE-2009-3094
cve.org/CVERecord?id=CVE-2009-3094
nvd.nist.gov/vuln/detail/CVE-2009-3094
access.redhat.com/security/cve/CVE-2009-3095
cve.org/CVERecord?id=CVE-2009-3095
nvd.nist.gov/vuln/detail/CVE-2009-3095
access.redhat.com/security/cve/CVE-2009-3229
cve.org/CVERecord?id=CVE-2009-3229
access.redhat.com/security/cve/CVE-2009-3230
cve.org/CVERecord?id=CVE-2009-3230
nvd.nist.gov/vuln/detail/CVE-2009-3230
access.redhat.com/security/cve/CVE-2009-3231
cve.org/CVERecord?id=CVE-2009-3231
nvd.nist.gov/vuln/detail/CVE-2009-3231