Version prüfen
psql --versionCVEs, die 12.8 betreffen
| CVE | Titel | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|
| CVE-2022-1552 | A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged... | 8.8 | — | 2022-08-31 | |
| CVE-2023-5869 | Postgresql: buffer overrun from integer overflow in array modification | 8.8 | — | 2023-12-11 | |
| CVE-2024-7348 | PostgreSQL relation replacement during pg_dump executes arbitrary SQL | 8.8 | — | 2024-08-08 | |
| CVE-2024-10979 | PostgreSQL PL/Perl environment variable changes execute arbitrary code | 8.8 | — | 2024-11-14 | |
| CVE-2026-6473 | PostgreSQL server undersizes allocations, via integer wraparound | 8.8 | — | 2026-05-14 | |
| CVE-2026-6475 | PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice | 8.8 | — | 2026-05-14 | |
| CVE-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | 8.8 | — | 2026-05-14 | |
| CVE-2026-6637 | PostgreSQL refint allows stack buffer overflow and SQL injection | 8.8 | — | 2026-05-14 | |
| CVE-2026-116323 | PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116326 | PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116330 | PostgreSQL pg_dump tar restore.sql fails to block psql command injection | 8.8 | 0.4% | 2026-11-12 | |
| CVE-2026-120145 | PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code | 8.8 | 0.5% | 2026-11-12 | |
| CVE-2026-120147 | PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120149 | PostgreSQL FDW batch-insert mismatch executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120150 | PostgreSQL expanded-record domain-check use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2021-23214 | When the server is configured to use trust authentication with a clientcert requirement or to use cert authent... | 8.1 | — | 2022-03-04 | |
| CVE-2026-120148 | PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code | 8.1 | 0.5% | 2026-11-12 | |
| CVE-2022-2625 | A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at... | 8.0 | — | 2022-08-18 | |
| CVE-2024-0985 | PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL | 8.0 | — | 2024-02-08 | |
| CVE-2023-39417 | Postgresql: extension script @substitutions@ within quoting allow sql injection | 7.5 | — | 2023-08-11 | |
| CVE-2026-6479 | PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion | 7.5 | — | 2026-05-14 | |
| CVE-2023-2454 | schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL... | 7.2 | — | 2023-06-09 | |
| CVE-2026-6478 | PostgreSQL discloses MD5-hashed passwords via covert timing channel | 6.5 | — | 2026-05-14 | |
| CVE-2021-23222 | A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of... | 5.9 | — | 2022-03-02 | |
| CVE-2021-43767 | Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use th... | 5.9 | — | 2022-08-26 | |
| CVE-2023-2455 | Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to... | 5.4 | — | 2023-06-09 | |
| CVE-2026-6472 | PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | 5.4 | — | 2026-05-14 | |
| CVE-2023-5868 | Postgresql: memory disclosure in aggregate function calls | 4.3 | — | 2023-12-11 | |
| CVE-2026-6474 | PostgreSQL timeofday() can disclose portions of server memory | 4.3 | — | 2026-05-14 | |
| CVE-2024-10976 | PostgreSQL row security below e.g. subqueries disregards user ID changes | 4.2 | — | 2024-11-14 | |
| CVE-2024-10978 | PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID | 4.2 | — | 2024-11-14 | |
| CVE-2022-41862 | In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of... | 3.7 | — | 2023-03-03 | |
| CVE-2024-10977 | PostgreSQL libpq retains an error message from man-in-the-middle | 3.1 | — | 2024-11-14 | |
| CVE-2023-5870 | Postgresql: role pg_signal_backend can signal certain superuser processes. | 2.2 | — | 2023-12-11 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).