CVE-2012-2655
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4...
CVE-2012-2655 is a medium vulnerability (CVSS 4.0) in Postgresql, published June 9, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.93%, the 87th percentile. Fixed in postgresql-8.4 8.4.12-0squeeze1.
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
Exploit likelihood
What each source reports
NVD Score used
4.0
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
- Record
CVE-2012-2655- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
- Record
CVE-2012-2655- Updated
- 2026-11-02
EUVDEUVD-2012-2640 No score
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
- Record
EUVD-2012-2640- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cvwf-36vc-625j No score
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4...
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
- Record
GHSA-cvwf-36vc-625j- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10030-1 No score
postgresql94-9.4.10-1.1 on GA media
These are all security issues fixed in the postgresql94-9.4.10-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10030-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10256-1 No score
postgresql93-9.3.15-1.1 on GA media
These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10256-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10273-1 No score
libecpg6-32bit-9.5.4-1.2 on GA media
These are all security issues fixed in the libecpg6-32bit-9.5.4-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10273-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-8.4Debian:6.0 |
before 8.4.12-0squeeze1, plus listed versions 8.4.10-0squeeze18.4.10-0squeeze1~bpo50+18.4.10-18.4.11-0squeeze18.4.11-1 Show 18 moreShow less8.4.5-0squeeze28.4.5-18.4.5-1~bpo50+18.4.5-28.4.5-2~bpo50+18.4.6-18.4.7-0squeeze1~bpo50+18.4.7-0squeeze28.4.7-18.4.8-0squeeze18.4.8-0squeeze1~bpo50+18.4.8-0squeeze28.4.8-0squeeze2~bpo50+18.4.8-18.4.8-28.4.9-0squeeze18.4.9-0squeeze1~bpo50+18.4.9-1 |
8.4.12-0squeeze1 |
postgresql84Red Hat:enterprise_linux:5::client |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-contribRed Hat:enterprise_linux:5::client |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-debuginfoRed Hat:enterprise_linux:5::client |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-docsRed Hat:enterprise_linux:5::client |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-libsRed Hat:enterprise_linux:5::client |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-pythonRed Hat:enterprise_linux:5::client |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-tclRed Hat:enterprise_linux:5::client |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84Red Hat:enterprise_linux:5::client_workstation |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
Show 66 moreShow less
| Package | Affected | Fixed |
|---|---|---|
postgresql84-develRed Hat:enterprise_linux:5::client_workstation |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-plperlRed Hat:enterprise_linux:5::client_workstation |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-plpythonRed Hat:enterprise_linux:5::client_workstation |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-pltclRed Hat:enterprise_linux:5::client_workstation |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-serverRed Hat:enterprise_linux:5::client_workstation |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-testRed Hat:enterprise_linux:5::client_workstation |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84Red Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-contribRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-debuginfoRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-develRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-docsRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-libsRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-plperlRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-plpythonRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-pltclRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-pythonRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-serverRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-tclRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresql84-testRed Hat:enterprise_linux:5::server |
before 0:8.4.12-1.el5_8 | 0:8.4.12-1.el5_8 |
postgresqlRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-debuginfoRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-libsRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-contribRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-develRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-docsRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-plperlRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-plpythonRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-pltclRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-serverRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-testRed Hat:enterprise_linux:6::client |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresqlRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-libsRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-contribRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-develRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-docsRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-plperlRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-plpythonRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-pltclRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-serverRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-testRed Hat:enterprise_linux:6::computenode |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresqlRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-contribRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-debuginfoRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-develRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-docsRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-libsRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-plperlRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-plpythonRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-pltclRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-serverRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-testRed Hat:enterprise_linux:6::server |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresqlRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-contribRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-develRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-docsRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-libsRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-plperlRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-plpythonRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-pltclRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-serverRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql-testRed Hat:enterprise_linux:6::workstation |
before 0:8.4.12-1.el6_2 | 0:8.4.12-1.el6_2 |
postgresql94openSUSE:Tumbleweed |
before 9.4.10-1.1 | 9.4.10-1.1 |
postgresql93openSUSE:Tumbleweed |
before 9.3.15-1.1 | 9.3.15-1.1 |
postgresql95openSUSE:Tumbleweed |
before 9.5.4-1.2 | 9.5.4-1.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
postgresql.org/about/news/1398
secunia.com/advisories/50718
lists.fedoraproject.org/pipermail/package-announce/2012-June/082292.html
lists.fedoraproject.org/pipermail/package-announce/2012-June/082258.html
debian.org/security/2012/dsa-2491
rhn.redhat.com/errata/RHSA-2012-1037.html
Show 60 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2012-June/082294.html
mandriva.com/security/advisories?name=MDVSA-2012:092
lists.opensuse.org/opensuse-updates/2012-09/msg00102.html
lists.opensuse.org/opensuse-updates/2012-10/msg00013.html
lists.opensuse.org/opensuse-updates/2012-10/msg00024.html
nvd.nist.gov/vuln/detail/CVE-2012-2655
github.com/advisories/GHSA-cvwf-36vc-625j
access.redhat.com/errata/RHSA-2012:1037
access.redhat.com/security/updates/classification
postgresql.org/docs/8.4/static/release.html
bugzilla.redhat.com/show_bug.cgi?id=816956
bugzilla.redhat.com/show_bug.cgi?id=825995
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1037.json
access.redhat.com/security/cve/CVE-2012-2143
cve.org/CVERecord?id=CVE-2012-2143
nvd.nist.gov/vuln/detail/CVE-2012-2143
access.redhat.com/security/cve/CVE-2012-2655
cve.org/CVERecord?id=CVE-2012-2655
suse.com/security/cve/CVE-2007-4772
suse.com/security/cve/CVE-2007-6600
suse.com/security/cve/CVE-2009-4034
suse.com/security/cve/CVE-2009-4136
suse.com/security/cve/CVE-2010-1169
suse.com/security/cve/CVE-2010-1170
suse.com/security/cve/CVE-2010-3433
suse.com/security/cve/CVE-2012-0866
suse.com/security/cve/CVE-2012-0867
suse.com/security/cve/CVE-2012-0868
suse.com/security/cve/CVE-2012-2143
suse.com/security/cve/CVE-2012-2655
suse.com/security/cve/CVE-2012-3488
suse.com/security/cve/CVE-2012-3489
suse.com/security/cve/CVE-2013-0255
suse.com/security/cve/CVE-2013-1899
suse.com/security/cve/CVE-2013-1900
suse.com/security/cve/CVE-2013-1901
suse.com/security/cve/CVE-2014-0060
suse.com/security/cve/CVE-2014-0061
suse.com/security/cve/CVE-2014-0062
suse.com/security/cve/CVE-2014-0063
suse.com/security/cve/CVE-2014-0064
suse.com/security/cve/CVE-2014-0065
suse.com/security/cve/CVE-2014-0066
suse.com/security/cve/CVE-2014-0067
suse.com/security/cve/CVE-2015-3165
suse.com/security/cve/CVE-2015-3166
suse.com/security/cve/CVE-2015-3167
suse.com/security/cve/CVE-2015-5288
suse.com/security/cve/CVE-2015-5289
suse.com/security/cve/CVE-2016-0766
suse.com/security/cve/CVE-2016-0773
suse.com/security/cve/CVE-2016-5423
suse.com/security/cve/CVE-2016-5424
suse.com/security/cve/CVE-2014-8161
suse.com/security/cve/CVE-2015-0241
suse.com/security/cve/CVE-2015-0242
suse.com/security/cve/CVE-2015-0243
suse.com/security/cve/CVE-2015-0244
suse.com/security/cve/CVE-2016-2193
suse.com/security/cve/CVE-2016-3065