{"id":"CVE-2014-8161","aliases":["DLA-152-1","DSA-3155-1","EUVD-2014-8002","GHSA-qxj3-8772-4f6w","MGASA-2015-0069","RHSA-2015:0699","RHSA-2015:0750","RHSA-2015:0856","SUSE-SU-2015:0478-1","SUSE-SU-2015:0639-1","UBUNTU-CVE-2014-8161","USN-2499-1","openSUSE-SU-2024:10256-1"],"status":"published","title":"PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x...","description":"PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0251,"percentile":0.84881,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-209"],"published":"2015-02-06T00:00:00Z","modified":"2026-06-29T10:08:56Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.1","fixed_in":["9.1.15-0ubuntu0.14.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","fixed_in":["9.3.6-0ubuntu0.14.04"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"postgresql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.22lts1-0+deb6u1"}]}],"versions":["8.4.10-0squeeze1","8.4.10-0squeeze1~bpo50+1","8.4.10-1","8.4.11-0squeeze1","8.4.11-1","8.4.12-0squeeze1","8.4.12-1","8.4.12-2","8.4.12-3","8.4.13-0squeeze1","8.4.13-1","8.4.14-1","8.4.15-0squeeze1","8.4.15-1","8.4.16-0squeeze1","8.4.16-1","8.4.17-0squeeze1","8.4.17-1","8.4.18-0squeeze1","8.4.18-0wheezy1","8.4.19-0squeeze1","8.4.19-0wheezy1","8.4.20-0squeeze1","8.4.20-0wheezy1","8.4.21-0squeeze1","8.4.21-0wheezy1","8.4.22-0wheezy1","8.4.5-0squeeze2","8.4.5-1","8.4.5-1~bpo50+1","8.4.5-2","8.4.5-2~bpo50+1","8.4.6-1","8.4.7-0squeeze1~bpo50+1","8.4.7-0squeeze2","8.4.7-1","8.4.8-0squeeze1","8.4.8-0squeeze1~bpo50+1","8.4.8-0squeeze2","8.4.8-0squeeze2~bpo50+1","8.4.8-1","8.4.8-2","8.4.9-0squeeze1","8.4.9-0squeeze1~bpo50+1","8.4.9-1"],"bundled":4},{"source":"osv","ecosystem":"Debian:7","package":"postgresql-9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.15-0+deb7u1"}]}],"versions":["9.1.10-0wheezy1","9.1.10-1","9.1.11-0wheezy1","9.1.11-1","9.1.11-1~bpo60+1","9.1.11-2","9.1.12-0wheezy1","9.1.12-0wheezy1~bpo60+1","9.1.12-1","9.1.13-0wheezy1","9.1.13-0wheezy1~bpo60+1","9.1.13-1","9.1.14-0+deb7u1","9.1.14-0wheezy1","9.1.15-0+deb7u1~bpo60+1","9.1.9-1","9.1.9-2","9.1.9-3","9.1.9-4","9.1.9-5"],"bundled":4},{"source":"osv","ecosystem":"Mageia:4","package":"postgresql9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.19-1.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"postgresql9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.15-1.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"postgresql9.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.10-1.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"postgresql9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-1.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"postgresql92-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el7","package":"postgresql92-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-2.el6_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.ael7b_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el7_1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"postgresql92-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"postgresql92-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"postgresql92-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"postgresql92-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"postgresql92-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"postgresql92-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"postgresql92-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"postgresql92-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"postgresql92-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"postgresql92-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"postgresql92-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"postgresql92-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"postgresql92-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"postgresql92-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-2.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-5.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"postgresql93-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"postgresql93-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-5.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"postgresql93-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-5.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql93-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.15-0ubuntu0.14.04"}]}],"versions":["9.1.10-1","9.1.10-1bzr1","9.1.11-1","9.1.11-2","9.1.12-1","9.1.13-1","9.1.14-0ubuntu0.14.04"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-0ubuntu0.14.04"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.6-0ubuntu0.14.04"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.15-1.1"}]}],"bundled":40}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"postgresql","product":"postgresql"},{"vendor":"postgresql global development group","product":"postgresql"}],"references":[{"url":"http://www.postgresql.org/docs/9.4/static/release-9-4-1.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-9-0-19.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-9-1-15.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-9-2-10.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-9-3-6.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/about/news/1569/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web","article"]},{"url":"http://www.debian.org/security/2015/dsa-3155","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8161","tags":["advisory"]},{"url":"http://www.postgresql.org/about/news/1569"},{"url":"https://github.com/advisories/GHSA-qxj3-8772-4f6w"},{"url":"https://advisories.mageia.org/MGASA-2015-0069.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15217","tags":["report"]},{"url":"https://www.debian.org/security/2015/dsa-3155","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0699","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1182043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1188684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1188689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1188694","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0699.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8161","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0241","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0241","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0243","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0244","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0244","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0750","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0750.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0856","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0856.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150478-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/888564","tags":["report"]},{"url":"https://bugzilla.suse.com/916953","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0244","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150639-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8161","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2499-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0244","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5424","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-8161","description":"PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.","status":"published","published":"2020-01-27T15:29:21Z","modified":"2024-08-06T13:10:51.11Z","updated_at":"2026-11-02T14:33:43.206348Z"}],"euvd":[{"id":"EUVD-2014-8002","description":"PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.","status":"published","published":"2020-01-27T15:29:21Z","modified":"2024-08-06T13:10:51Z","updated_at":"2026-11-03T01:56:52.443165Z"}],"ghsa":[{"id":"GHSA-qxj3-8772-4f6w","title":"PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x...","description":"PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.","status":"published","published":"2022-05-17T19:57:20Z","modified":"2024-04-04T00:01:07Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:55:48.388362Z"}],"nvd":[{"id":"CVE-2014-8161","description":"PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.","status":"published","published":"2020-01-27T16:15:10.063Z","modified":"2026-06-17T00:16:24.643Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:02:59.461996Z"}],"osv":[{"id":"UBUNTU-CVE-2014-8161","description":"PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.","status":"published","published":"2015-02-06T00:00:00Z","modified":"2026-04-22T09:52:10.761953Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"DLA-152-1","title":"postgresql-8.4 - new minor release","status":"published","published":"2015-02-12T00:00:00Z","modified":"2026-03-09T01:01:23.119569Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3155-1","title":"postgresql-9.1 - security update","status":"published","published":"2015-02-06T00:00:00Z","modified":"2026-03-09T01:21:14.614423Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0069","title":"Updated postgresql packages fix security vulnerabilities","description":"Updated postgresql packages fix security vulnerabilities:\n\nA user with limited clearance on a table might have access to information in\ncolumns without SELECT rights on through server error messages\n(CVE-2014-8161).\n\nThe function to_char() might read/write past the end of a buffer. This might\ncrash the server when a formatting template is processed (CVE-2015-0241).\n\nThe pgcrypto module is vulnerable to stack buffer overrun that might crash\nthe server (CVE-2015-0243).\n\nEmil Lenngren reported that an attacker can inject SQL commands when the\nsynchronization between client and server is lost (CVE-2015-0244).\n\nThis update provides PostgreSQL versions 9.3.6, 9.2.10, 9.1.15, and\n9.0.19 that fix these issues, as well as several others.\n","status":"published","published":"2015-02-17T18:38:13Z","modified":"2026-04-16T06:24:07.102006912Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10256-1","title":"postgresql93-9.3.15-1.1 on GA media","description":"These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:24.407905Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:0699","title":"Red Hat Security Advisory: postgresql92-postgresql security update","status":"published","published":"2024-09-13T09:22:22Z","modified":"2026-06-29T10:08:43Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0750","title":"Red Hat Security Advisory: postgresql security update","status":"published","published":"2024-09-13T09:22:16Z","modified":"2026-06-29T10:08:48Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:0856","title":"Red Hat Security Advisory: postgresql92-postgresql security update","status":"published","published":"2024-09-13T09:22:12Z","modified":"2026-06-29T10:08:56Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0478-1","title":"Security update for postgresql93","description":"postgresql93 was updated to version 9.3.6 to fix four security issues.\n\nThese security issues were fixed:\n- CVE-2015-0241: Fix buffer overruns in to_char() (bnc#916953).\n- CVE-2015-0243: Fix buffer overruns in contrib/pgcrypto (bnc#916953).\n- CVE-2015-0244: Fix possible loss of frontend/backend protocol synchronization after an error (bnc#916953).\n- CVE-2014-8161: Fix information leak via constraint-violation error messages (bnc#916953).\n\nThis non-security issue was fixed:\n- Move the server socket from /tmp to /var/run to avoid\n  problems with clients that use PrivateTmp (bnc#888564).\n\nMore information is available at http://www.postgresql.org/docs/9.3/static/release-9-3-6.html\n","status":"published","published":"2015-02-23T15:59:41Z","modified":"2026-02-04T03:52:08.622579Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0639-1","title":"Security update for postgresql91","description":"\nThe PostgreSQL database server was updated to 9.1.15, fixing bugs and \nsecurity issues:\n\n    * Fix buffer overruns in to_char() (CVE-2015-0241).\n    * Fix buffer overrun in replacement *printf() functions\n      (CVE-2015-0242).\n    * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).\n    * Fix possible loss of frontend/backend protocol synchronization after\n      an error (CVE-2015-0244).\n    * Fix information leak via constraint-violation error messages\n      (CVE-2014-8161).\n\nFor a comprehensive list of fixes, please refer to the following release \nnotes:\n\n    * http://www.postgresql.org/docs/9.1/static/release-9-1-15.html\n      \u003chttp://www.postgresql.org/docs/9.1/static/release-9-1-15.html\u003e\n    * http://www.postgresql.org/docs/9.1/static/release-9-1-14.html\n      \u003chttp://www.postgresql.org/docs/9.1/static/release-9-1-14.html\u003e\n    * http://www.postgresql.org/docs/9.1/static/release-9-1-13.html\n      \u003chttp://www.postgresql.org/docs/9.1/static/release-9-1-13.html\u003e\n\nSecurity Issues:\n\n    * CVE-2015-0241\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0241\u003e\n    * CVE-2015-0243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0243\u003e\n    * CVE-2015-0244\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0244\u003e\n    * CVE-2014-8161\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8161\u003e\n\n","status":"published","published":"2015-03-02T17:37:06Z","modified":"2026-02-04T03:37:44.196394Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"USN-2499-1","title":"postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4 vulnerabilities","description":"Stephen Frost discovered that PostgreSQL incorrectly displayed certain\nvalues in error messages. An authenticated user could gain access to seeing\ncertain values, contrary to expected permissions. (CVE-2014-8161)\n\nAndres Freund, Peter Geoghegan and Noah Misch discovered that PostgreSQL\nincorrectly handled buffers in to_char functions. An authenticated attacker\ncould possibly use this issue to cause PostgreSQL to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2015-0241)\n\nIt was discovered that PostgreSQL incorrectly handled memory in the\npgcrypto extension. An authenticated attacker could possibly use this issue\nto cause PostgreSQL to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2015-0243)\n\nEmil Lenngren discovered that PostgreSQL incorrectly handled extended\nprotocol message reading. An authenticated attacker could possibly use this\nissue to cause PostgreSQL to crash, resulting in a denial of service, or\npossibly inject query messages. (CVE-2015-0244)\n","status":"published","published":"2015-02-11T17:57:11Z","modified":"2026-04-22T09:08:13.309584Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}