Every CVE Search/ Get API key

CVE-2012-0868

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9...

6.8 MediumFix available

CVE-2012-0868 is a medium vulnerability (CVSS 6.8) in Postgresql, published February 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. Fixed in postgresql-8.4 8.4.11-0squeeze1.

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.

Exploit likelihood

2.65%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.

Record
CVE-2012-0868
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-89
Updated
2026-11-02
CVE List No score

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.

Record
CVE-2012-0868
Updated
2026-11-02
EUVDEUVD-2012-0893 No score

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.

Record
EUVD-2012-0893
Updated
2026-11-03
GitHub AdvisoriesGHSA-4x75-j285-xp55 No score

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9...

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.

Record
GHSA-4x75-j285-xp55
Weakness
CWE-89
Updated
2026-11-02
OSVopenSUSE-SU-2024:10030-1 No score

postgresql94-9.4.10-1.1 on GA media

These are all security issues fixed in the postgresql94-9.4.10-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10030-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10256-1 No score

postgresql93-9.3.15-1.1 on GA media

These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10256-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10273-1 No score

libecpg6-32bit-9.5.4-1.2 on GA media

These are all security issues fixed in the libecpg6-32bit-9.5.4-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10273-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql-8.4
Debian:6.0
 before 8.4.11-0squeeze1, plus listed versions
8.4.10-0squeeze18.4.10-0squeeze1~bpo50+18.4.10-18.4.5-0squeeze28.4.5-1
Show 16 moreShow less
8.4.5-1~bpo50+18.4.5-28.4.5-2~bpo50+18.4.6-18.4.7-0squeeze1~bpo50+18.4.7-0squeeze28.4.7-18.4.8-0squeeze18.4.8-0squeeze1~bpo50+18.4.8-0squeeze28.4.8-0squeeze2~bpo50+18.4.8-18.4.8-28.4.9-0squeeze18.4.9-0squeeze1~bpo50+18.4.9-1
8.4.11-0squeeze1
postgresql
Red Hat:enterprise_linux:5::client
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-contrib
Red Hat:enterprise_linux:5::client
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-docs
Red Hat:enterprise_linux:5::client
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-libs
Red Hat:enterprise_linux:5::client
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-python
Red Hat:enterprise_linux:5::client
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-tcl
Red Hat:enterprise_linux:5::client
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
Show 90 moreShow less
Affected packages
PackageAffectedFixed
postgresql-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-pl
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-server
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-test
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-contrib
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-devel
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-docs
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-libs
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-pl
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-python
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-server
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-tcl
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql-test
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-4.el5_8
0:8.1.23-4.el5_8
postgresql84
Red Hat:enterprise_linux:5::client
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-contrib
Red Hat:enterprise_linux:5::client
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-docs
Red Hat:enterprise_linux:5::client
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-libs
Red Hat:enterprise_linux:5::client
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-python
Red Hat:enterprise_linux:5::client
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-tcl
Red Hat:enterprise_linux:5::client
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-plperl
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-plpython
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-pltcl
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-server
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-test
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-contrib
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-devel
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-docs
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-libs
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-plperl
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-plpython
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-pltcl
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-python
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-server
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-tcl
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql84-test
Red Hat:enterprise_linux:5::server
 before 0:8.4.11-1.el5_8
0:8.4.11-1.el5_8
postgresql
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-libs
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-contrib
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-devel
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-docs
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-plperl
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-plpython
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-pltcl
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-server
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-test
Red Hat:enterprise_linux:6::client
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-libs
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-contrib
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-devel
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-docs
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-plperl
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-plpython
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-pltcl
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-server
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-test
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-contrib
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-devel
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-docs
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-libs
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-plperl
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-plpython
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-pltcl
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-server
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-test
Red Hat:enterprise_linux:6::server
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-contrib
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-devel
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-docs
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-libs
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-plperl
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-plpython
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-pltcl
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-server
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql-test
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.11-1.el6_2
0:8.4.11-1.el6_2
postgresql94
openSUSE:Tumbleweed
 before 9.4.10-1.1
9.4.10-1.1
postgresql93
openSUSE:Tumbleweed
 before 9.3.15-1.1
9.3.15-1.1
postgresql95
openSUSE:Tumbleweed
 before 9.5.4-1.2
9.5.4-1.2

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 69 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open