CVE-2009-4136
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8...
6.5 Medium
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.
Exploit likelihood
3.64%Down 5.4 points since Feb 4, 2022
What each source reports
NVD Score used
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.
- Record
CVE-2009-4136- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.
- Record
CVE-2009-4136- Updated
- 2026-11-02
EUVDEUVD-2009-4106 No score
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.
- Record
EUVD-2009-4106- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p8jm-5754-gqxq No score
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8...
PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.
- Record
GHSA-p8jm-5754-gqxq- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10030-1 No score
postgresql94-9.4.10-1.1 on GA media
These are all security issues fixed in the postgresql94-9.4.10-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10030-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10256-1 No score
postgresql93-9.3.15-1.1 on GA media
These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10256-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10273-1 No score
libecpg6-32bit-9.5.4-1.2 on GA media
These are all security issues fixed in the libecpg6-32bit-9.5.4-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10273-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-8.1Debian:4.0 From an advisory covering 2 CVEs |
before 8.1.19-0etch1, plus listed versions 8.1.10-0etch18.1.10-18.1.11-0etch18.1.11-18.1.13-0etch1 Show 8 moreShow less8.1.15-0etch18.1.17-0etch18.1.18-0etch18.1.8-18.1.8-28.1.9-0etch18.1.9-0etch28.1.9-1 |
8.1.19-0etch1 |
postgresql-7.4Debian:4.0 From an advisory covering 2 CVEs |
before 1:7.4.27-0etch1, plus listed versions 1:7.4.16-11:7.4.17-0etch11:7.4.17-11:7.4.19-0etch11:7.4.23-0etch11:7.4.26-0etch1 |
1:7.4.27-0etch1 |
postgresql-8.3Debian:5.0 From an advisory covering 2 CVEs |
before 8.3.9-0lenny1, plus listed versions 8.3.5-18.3.5-28.3.6-18.3.6-1~bpo40+18.3.7-0lenny1 Show 11 moreShow less8.3.7-0lenny1~bpo40+18.3.7-18.3.7-28.3.7-38.3.7-48.3.8-0lenny18.3.8-0lenny1~bpo40+18.3.8-0lenny1~bpo40+28.3.8-18.3.8-1+sh48.3.9-0lenny1~bpo40+1 |
8.3.9-0lenny1 |
rh-postgresqlRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
Show 120 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-postgresql-plRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:7.3.21-3 | 0:7.3.21-3 |
postgresqlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresqlRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-contribRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-docsRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-libsRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-pythonRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-tclRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresqlRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-contribRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-docsRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-libsRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-pythonRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-tclRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql94openSUSE:Tumbleweed From an advisory covering 35 CVEs |
before 9.4.10-1.1 | 9.4.10-1.1 |
postgresql93openSUSE:Tumbleweed From an advisory covering 40 CVEs |
before 9.3.15-1.1 | 9.3.15-1.1 |
postgresql95openSUSE:Tumbleweed From an advisory covering 37 CVEs |
before 9.5.4-1.2 | 9.5.4-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-4136 is a medium vulnerability (CVSS 6.5) in Postgresql, published December 15, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.64%, the 89th percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2010-0427.html
marc.info?l=bugtraq&m=134124585221119&w=2
securitytracker.com/id?1023326
secunia.com/advisories/39820
postgresql.org/docs/current/static/release-8-2-15.html
Show 89 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=546321
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9358
securityfocus.com/archive/1/509917/100/0/threaded
lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
mandriva.com/security/advisories?name=MDVSA-2009:333
vupen.com/english/advisories/2009/3519
osvdb.org/61039
wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
nvd.nist.gov/vuln/detail/CVE-2009-4136
github.com/advisories/GHSA-p8jm-5754-gqxq
access.redhat.com/errata/RHSA-2010:0427
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0427.json
cve.org/CVERecord?id=CVE-2009-4136
suse.com/security/cve/CVE-2007-4772