{"id":"CVE-2016-5424","aliases":["DLA-592-1","DSA-3646-1","EUVD-2016-6369","GHSA-9j99-5j9q-2gmp","MGASA-2016-0289","RHSA-2016:1781","RHSA-2016:1820","RHSA-2016:1821","RHSA-2016:2606","RHSA-2017:2425","SUSE-SU-2016:2414-1","SUSE-SU-2016:2415-1","SUSE-SU-2016:2418-1","UBUNTU-CVE-2016-5424","USN-3066-1","openSUSE-SU-2024:10030-1","openSUSE-SU-2024:10256-1","openSUSE-SU-2024:10273-1"],"status":"published","title":"PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x...","description":"PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) \" (double quote), (2) \\ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04612,"percentile":0.91743,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2016-08-11T00:00:00Z","modified":"2026-06-29T10:17:14Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.1","fixed_in":["9.1.23-0ubuntu0.14.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","fixed_in":["9.3.14-0ubuntu0.14.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","fixed_in":["9.5.4-0ubuntu0.16.04"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"postgresql-9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.23-0+deb7u1"}]}],"versions":["9.1.10-0wheezy1","9.1.10-1","9.1.11-0wheezy1","9.1.11-1","9.1.11-1~bpo60+1","9.1.11-2","9.1.12-0wheezy1","9.1.12-0wheezy1~bpo60+1","9.1.12-1","9.1.13-0wheezy1","9.1.13-0wheezy1~bpo60+1","9.1.13-1","9.1.14-0+deb7u1","9.1.14-0wheezy1","9.1.15-0+deb7u1","9.1.15-0+deb7u1~bpo60+1","9.1.16-0+deb7u1","9.1.16-0+deb7u2","9.1.17-0+deb7u1","9.1.18-0+deb7u1","9.1.19-0+deb7u1","9.1.20-0+deb7u1","9.1.21-0+deb7u1","9.1.22-0+deb7u1","9.1.9-1","9.1.9-2","9.1.9-3","9.1.9-4","9.1.9-5"],"bundled":2},{"source":"osv","ecosystem":"Debian:8","package":"postgresql-9.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-0+deb8u1"}]}],"versions":["9.4.1-1","9.4.2-0+deb8u1","9.4.2-1","9.4.3-0+deb8u1","9.4.3-1","9.4.4-0+deb8u1","9.4.4-1","9.4.4-2","9.4.5-0+deb8u1","9.4.5-0+deb8u1~bpo70+1","9.4.5-1","9.4.5-2","9.4.6-0+deb8u1","9.4.6-0+deb8u1~bpo70+1","9.4.7-0+deb8u1","9.4.7-0+deb8u1~bpo70+1","9.4.7-0+deb8u1~bpo70+2","9.4.8-0+deb8u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"postgresql9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.14-1.mga5"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"postgresql9.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-1.mga5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.9-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.4-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.18-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"rh-postgresql95-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"rh-postgresql95-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"rh-postgresql95-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"rh-postgresql95-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"rh-postgresql95-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"rh-postgresql95-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"rh-postgresql95-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"spacewalk-base-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"spacewalk-dobby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"spacewalk-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5-1.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"spacewalk-setup-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-27.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite_managed_db:5.7::el6","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"rh-postgresql95-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"rh-postgresql95-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"rh-postgresql95-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"rh-postgresql95-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"rh-postgresql95-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"rh-postgresql95-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.7-2.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"rh-postgresql95-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-iss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-iss-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-package-push-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-xml-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-53.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-base-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-base-minimal-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-dobby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-grail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5-1.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-pxt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-setup-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-27.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-sniglets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-32.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-35.el6sat"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.14-19.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.14-19.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.9-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.23-0ubuntu0.14.04"}]}],"versions":["9.1.10-1","9.1.10-1bzr1","9.1.11-1","9.1.11-2","9.1.12-1","9.1.13-1","9.1.14-0ubuntu0.14.04","9.1.15-0ubuntu0.14.04","9.1.16-0ubuntu0.14.04","9.1.17-0ubuntu0.14.04","9.1.18-0ubuntu0.14.04","9.1.19-0ubuntu0.14.04","9.1.20-0ubuntu0.14.04","9.1.21-0ubuntu0.14.04","9.1.22-0ubuntu0.14.04"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.14-0ubuntu0.14.04"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-0ubuntu0.16.04"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.14-0ubuntu0.14.04"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-0ubuntu0.16.04"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.10-1.1"}]}],"bundled":35},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.15-1.1"}]}],"bundled":40},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql95","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-1.2"}]}],"bundled":37}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"postgresql","product":"postgresql"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-1781.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-4-9.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","article"]},{"url":"http://www.securitytracker.com/id/1036617","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1821.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3646","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-33","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2425","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-5-4.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","article"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-3-14.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://www.postgresql.org/about/news/1688/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","VDB Entry","web","article","report"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-2-18.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","article"]},{"url":"http://www.securityfocus.com/bid/92435","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2606.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1820.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-1-23.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5424","tags":["advisory"]},{"url":"https://www.postgresql.org/about/news/1688"},{"url":"https://github.com/advisories/GHSA-9j99-5j9q-2gmp"},{"url":"https://advisories.mageia.org/MGASA-2016-0289.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19183","tags":["report"]},{"url":"http://www.postgresql.org/docs/current/static/release-9-3-14.html","tags":["web"]},{"url":"http://www.postgresql.org/docs/current/static/release-9-4-9.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1781","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364002","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1781.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5423","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5423","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5424","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1820","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1820.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1821","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1821.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2606","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","tags":["article"]},{"url":"https://www.postgresql.org/docs/9.2/static/release-9-2-18.html","tags":["article"]},{"url":"https://www.postgresql.org/docs/9.2/static/release-9-2-17.html","tags":["article"]},{"url":"https://www.postgresql.org/docs/9.2/static/release-9-2-16.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122143","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2606.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448089","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2425.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7484","tags":["advisory"]},{"url":"https://www.postgresql.org/about/news/1746/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7485","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7485","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7485","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7486","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7486","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7486","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162414-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/973660","tags":["report"]},{"url":"https://bugzilla.suse.com/993453","tags":["report"]},{"url":"https://bugzilla.suse.com/993454","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5424","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162415-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162418-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-5424","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3066-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-5423","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3065","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-5424","description":"PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) \" (double quote), (2) \\ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.","status":"published","published":"2016-12-09T23:00:00Z","modified":"2024-08-06T01:00:59.909Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6369","description":"PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) \" (double quote), (2) \\ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.","status":"published","published":"2016-12-09T23:00:00Z","modified":"2024-08-06T01:00:59Z","updated_at":"2026-11-03T02:22:42.442421Z"}],"ghsa":[{"id":"GHSA-9j99-5j9q-2gmp","title":"PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x...","description":"PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) \" (double quote), (2) \\ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.","status":"published","published":"2022-05-14T03:56:27Z","modified":"2025-04-12T13:08:10Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:01:30.991417Z"}],"nvd":[{"id":"CVE-2016-5424","description":"PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) \" (double quote), (2) \\ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.","status":"published","published":"2016-12-09T23:59:02.05Z","modified":"2026-06-17T00:49:23.29Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:N/AC:H/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:03:32.79141Z"}],"osv":[{"id":"RHSA-2016:1781","title":"Red Hat Security Advisory: rh-postgresql94-postgresql security update","status":"published","published":"2024-09-13T11:05:33Z","modified":"2026-06-29T10:13:38Z","cvss":[{"version":"3.0","score":8.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1820","title":"Red Hat Security Advisory: postgresql92-postgresql security update","status":"published","published":"2024-09-13T11:05:28Z","modified":"2026-06-29T10:13:40Z","cvss":[{"version":"3.0","score":8.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1821","title":"Red Hat Security Advisory: rh-postgresql95-postgresql security update","status":"published","published":"2024-09-13T11:05:34Z","modified":"2026-06-29T10:13:40Z","cvss":[{"version":"3.0","score":8.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2606","title":"Red Hat Security Advisory: postgresql security and bug fix update","status":"published","published":"2024-09-13T11:06:33Z","modified":"2026-06-29T10:14:25Z","cvss":[{"version":"3.0","score":8.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2017:2425","title":"Red Hat Security Advisory: rh-postgresql95-postgresql security update","status":"published","published":"2024-09-13T12:00:36Z","modified":"2026-06-29T10:17:14Z","cvss":[{"version":"3.0","score":8.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2016-5424","description":"PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) \" (double quote), (2) \\ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.","status":"published","published":"2016-08-11T00:00:00Z","modified":"2026-04-22T10:52:31.516623Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.642042Z"},{"id":"DLA-592-1","title":"postgresql-9.1 - security update","status":"published","published":"2016-08-11T00:00:00Z","modified":"2026-03-09T02:10:27.567065Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3646-1","title":"postgresql-9.4 - security update","status":"published","published":"2016-08-11T00:00:00Z","modified":"2026-03-09T01:19:14.828752Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0289","title":"Updated postgresql packages fix security vulnerability","description":"It was discovered that certain SQL statements containing CASE/WHEN\ncommands could crash the PostgreSQL server, or disclose a few bytes of\nserver memory, potentially leading to arbitrary code execution\n(CVE-2016-5423).\n\nIt was found that PostgreSQL client programs mishandle database and role\nnames containing newlines, carriage returns, double quotes, or\nbackslashes. By crafting such an object name, roles with the CREATEDB or\nCREATEROLE option could escalate their privileges to root when a root user\nnext executes maintenance with a vulnerable program. Vulnerable programs\ninclude pg_dumpall, pg_upgrade, vacuumdb, reindexdb, and clusterdb\n(CVE-2016-5424).\n","status":"published","published":"2016-08-31T15:32:33Z","modified":"2026-04-16T06:22:58.714905988Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10030-1","title":"postgresql94-9.4.10-1.1 on GA media","description":"These are all security issues fixed in the postgresql94-9.4.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:28:08.668099Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10256-1","title":"postgresql93-9.3.15-1.1 on GA media","description":"These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:24.407905Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10273-1","title":"libecpg6-32bit-9.5.4-1.2 on GA media","description":"These are all security issues fixed in the libecpg6-32bit-9.5.4-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:33:24.576512Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:2414-1","title":"Security update for postgresql93","description":"This update for postgresql93 to version 9.3.14 fixes the several issues.\n\nThese security issues were fixed:\n- CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference (bsc#993454).\n- CVE-2016-5424: Fix client programs' handling of special characters in database and role names (bsc#993453).\n\nThis non-security issue was fixed:\n- bsc#973660: Added 'Requires: timezone' to Service Pack\n\nFor additional non-security issues please refer to\n- http://www.postgresql.org/docs/9.3/static/release-9-3-14.html\n- http://www.postgresql.org/docs/9.3/static/release-9-3-13.html\n- http://www.postgresql.org/docs/9.4/static/release-9-3-12.html \n","status":"published","published":"2016-09-29T11:12:27Z","modified":"2026-02-04T02:38:54.033996Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2415-1","title":"Security update for postgresql94","description":"This update for postgresql94 to version 9.4.9 fixes the several issues.\n\nThese security issues were fixed:\n- CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference (bsc#993454).\n- CVE-2016-5424: Fix client programs' handling of special characters in database and role names (bsc#993453).\n\nThis non-security issue was fixed:\n- bsc#973660: Added 'Requires: timezone' to Service Pack\n\nFor additional non-security issues please refer to\n- http://www.postgresql.org/docs/9.4/static/release-9-4-9.html\n- http://www.postgresql.org/docs/9.4/static/release-9-4-8.html\n- http://www.postgresql.org/docs/9.4/static/release-9-4-7.html\n","status":"published","published":"2016-09-29T11:14:14Z","modified":"2026-02-04T02:14:12.950161Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2418-1","title":"Security update for postgresql94","description":"This update for postgresql94 to version 9.4.9 fixes the several issues.\n\nThese security issues were fixed:\n- CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference (bsc#993454).\n- CVE-2016-5424: Fix client programs' handling of special characters in database and role names (bsc#993453).\n\nFor the non-security issues please refer to \n- http://www.postgresql.org/docs/9.4/static/release-9-4-9.html\n- http://www.postgresql.org/docs/9.4/static/release-9-4-8.html\n- http://www.postgresql.org/docs/9.4/static/release-9-4-7.html\n","status":"published","published":"2016-09-29T13:13:56Z","modified":"2026-02-04T03:32:19.371273Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3066-1","title":"postgresql-9.1, postgresql-9.3, postgresql-9.5 vulnerabilities","description":"Heikki Linnakangas discovered that PostgreSQL incorrectly handled certain\nnested CASE/WHEN expressions. A remote attacker could possibly use this\nissue to cause PostgreSQL to crash, resulting in a denial of service.\n(CVE-2016-5423)\n\nNathan Bossart discovered that PostgreSQL incorrectly handled special\ncharacters in database and role names. A remote attacker could possibly use\nthis issue to escalate privileges. (CVE-2016-5424)\n","status":"published","published":"2016-08-18T18:43:36Z","modified":"2026-04-22T09:27:27.352867Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}