CVE-2006-2313
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and...
7.5 High
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
Exploit likelihood
2.79%Up 0.1 points since Feb 4, 2022
What each source reports
NVD Score used
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
- Record
CVE-2006-2313- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
- Record
CVE-2006-2313- Updated
- 2026-11-02
EUVDEUVD-2006-2314 No score
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
- Record
EUVD-2006-2314- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggvw-qxcq-2xgj No score
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and...
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
- Record
GHSA-ggvw-qxcq-2xgj- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresqlDebian:3.1 From an advisory covering 2 CVEs |
before 7.4.7-6sarge2, plus listed versions 7.4.7-6sarge1 |
7.4.7-6sarge2 |
rh-postgresqlRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
Show 87 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-postgresql-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresqlRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:7.3.15-2 | 0:7.3.15-2 |
postgresqlRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:7.4.13-2.RHEL4.1 | 0:7.4.13-2.RHEL4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2313 is a high vulnerability (CVSS 7.5) in Postgresql, published May 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.79%, the 86th percentile. No source names a fixed version.
References
security.gentoo.org/glsa/glsa-200607-04.xml
secunia.com/advisories/20435
securityfocus.com/bid/18092
Show 42 moreShow less
postgresql.org/docs/techdocs.50
lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html
redhat.com/support/errata/RHSA-2006-0526.html
trustix.org/errata/2006/0032
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10618
vupen.com/english/advisories/2006/1941
usn.ubuntu.com/288-1
mandriva.com/security/advisories?name=MDKSA-2006:098
support.avaya.com/elmodocs2/security/ASA-2006-113.htm
exchange.xforce.ibmcloud.com/vulnerabilities/26627
archives.postgresql.org/pgsql-announce/2006-05/msg00010.php
securitytracker.com/id?1016142
ubuntu.com/usn/usn-288-2
debian.org/security/2006/dsa-1087
nvd.nist.gov/vuln/detail/CVE-2006-2313
github.com/advisories/GHSA-ggvw-qxcq-2xgj
access.redhat.com/errata/RHSA-2006:0526
bugzilla.redhat.com/show_bug.cgi?id=180536
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0526.json
cve.org/CVERecord?id=CVE-2006-0591