CVE-2009-3229
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
Exploit likelihood
What each source reports
NVD Score used
4.0
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
- Record
CVE-2009-3229- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
- Record
CVE-2009-3229- Updated
- 2026-11-02
EUVDEUVD-2009-3212 No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
- Record
EUVD-2009-3212- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j8v8-w66x-xw2w No score
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
- Record
GHSA-j8v8-w66x-xw2w- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-7.4Debian:4.0 From an advisory covering 3 CVEs |
before 1:7.4.26-0etch1, plus listed versions 1:7.4.16-11:7.4.17-0etch11:7.4.17-11:7.4.19-0etch11:7.4.23-0etch1 |
1:7.4.26-0etch1 |
postgresql-8.1Debian:4.0 From an advisory covering 3 CVEs |
before 8.1.18-0etch1, plus listed versions 8.1.10-0etch18.1.10-18.1.11-0etch18.1.11-18.1.13-0etch1 Show 7 moreShow less8.1.15-0etch18.1.17-0etch18.1.8-18.1.8-28.1.9-0etch18.1.9-0etch28.1.9-1 |
8.1.18-0etch1 |
postgresql-8.3Debian:5.0 From an advisory covering 3 CVEs |
before 8.3.8-0lenny1, plus listed versions 8.3.5-18.3.5-28.3.6-18.3.6-1~bpo40+18.3.7-0lenny1 Show 7 moreShow less8.3.7-0lenny1~bpo40+18.3.7-18.3.7-28.3.7-38.3.7-48.3.8-0lenny1~bpo40+18.3.8-0lenny1~bpo40+2 |
8.3.8-0lenny1 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 1:2.2.13-2.el5s2 | 1:2.2.13-2.el5s2 |
mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-clusterRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pearRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 1:1.8.1-2.el5s2 | 1:1.8.1-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3229 is a medium vulnerability (CVSS 4.0) in Postgresql, published September 17, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=522092
redhat.com/archives/fedora-package-announce/2009-September/msg00307.html
postgresql.org/docs/8.3/static/release-8-3-8.html
securityfocus.com/bid/36314
marc.info?l=bugtraq&m=134124585221119&w=2
secunia.com/advisories/36837
Show 47 moreShow less
postgresql.org/support/security.html
secunia.com/advisories/36660
securityfocus.com/archive/1/509917/100/0/threaded
secunia.com/advisories/36800
us.debian.org/security/2009/dsa-1900
redhat.com/archives/fedora-package-announce/2009-September/msg00305.html
lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1
secunia.com/advisories/36727
lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
ubuntu.com/usn/usn-834-1
wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
nvd.nist.gov/vuln/detail/CVE-2009-3229
github.com/advisories/GHSA-j8v8-w66x-xw2w
access.redhat.com/errata/RHSA-2009:1461
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=466518
bugzilla.redhat.com/show_bug.cgi?id=506896
bugzilla.redhat.com/show_bug.cgi?id=511020
bugzilla.redhat.com/show_bug.cgi?id=521619
bugzilla.redhat.com/show_bug.cgi?id=522084
bugzilla.redhat.com/show_bug.cgi?id=522085
bugzilla.redhat.com/show_bug.cgi?id=522209
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1461.json
access.redhat.com/security/cve/CVE-2008-4456
cve.org/CVERecord?id=CVE-2008-4456
nvd.nist.gov/vuln/detail/CVE-2008-4456
access.redhat.com/security/cve/CVE-2009-2446
cve.org/CVERecord?id=CVE-2009-2446
nvd.nist.gov/vuln/detail/CVE-2009-2446
access.redhat.com/security/cve/CVE-2009-2687
cve.org/CVERecord?id=CVE-2009-2687
nvd.nist.gov/vuln/detail/CVE-2009-2687
access.redhat.com/security/cve/CVE-2009-3094
cve.org/CVERecord?id=CVE-2009-3094
nvd.nist.gov/vuln/detail/CVE-2009-3094
access.redhat.com/security/cve/CVE-2009-3095
cve.org/CVERecord?id=CVE-2009-3095
nvd.nist.gov/vuln/detail/CVE-2009-3095
access.redhat.com/security/cve/CVE-2009-3229
cve.org/CVERecord?id=CVE-2009-3229
access.redhat.com/security/cve/CVE-2009-3230
cve.org/CVERecord?id=CVE-2009-3230
nvd.nist.gov/vuln/detail/CVE-2009-3230
access.redhat.com/security/cve/CVE-2009-3231
cve.org/CVERecord?id=CVE-2009-3231
nvd.nist.gov/vuln/detail/CVE-2009-3231