InfraGuard
Anmelden Jetzt ausprobieren Jetzt kaufen

PostgreSQL 8.0 – Schwachstellen

82 bekannte CVEs betreffen die Versionslinie 8.0 von PostgreSQL.

9.8 max. CVSSSupport beendet am 2010-10-01

Behoben in

8.0.18.0.98.0.118.0.138.0.158.0.24
Version prüfenpsql --version

CVEs, die 8.0 betreffen

CVE Titel CVSS Ausgenutzt EPSS Veröffentlicht
CVE-2015-0244 PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1... 9.8 — 2020-01-28
CVE-2015-3166 The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x befor... 9.8 — 2019-11-21
CVE-2015-0241 The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6... 8.8 — 2020-01-28
CVE-2015-0242 Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before... 8.8 — 2020-01-28
CVE-2015-0243 Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9... 8.8 — 2020-01-28
CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 an... 8.8 — 2020-11-16
CVE-2019-10127 A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied... 8.8 — 2021-03-20
CVE-2026-6473 PostgreSQL server undersizes allocations, via integer wraparound 8.8 — 2026-05-14
CVE-2026-6475 PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice 8.8 — 2026-05-14
CVE-2026-6477 PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory 8.8 — 2026-05-14
CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection 8.8 — 2026-05-14
CVE-2026-116323 PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code 8.8 0.6% 2026-11-12
CVE-2026-116326 PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf 8.8 0.6% 2026-11-12
CVE-2026-116330 PostgreSQL pg_dump tar restore.sql fails to block psql command injection 8.8 0.4% 2026-11-12
CVE-2026-120145 PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code 8.8 0.5% 2026-11-12
CVE-2026-120147 PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code 8.8 0.6% 2026-11-12
CVE-2026-120149 PostgreSQL FDW batch-insert mismatch executes arbitrary code 8.8 0.6% 2026-11-12
CVE-2026-120150 PostgreSQL expanded-record domain-check use-after-free executes arbitrary code 8.8 0.6% 2026-11-12
CVE-2007-0555 PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 all... 8.5 — 2007-02-06
CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4... 8.5 — 2010-05-20
CVE-2010-1447 The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7... 8.5 — 2010-05-20
CVE-2016-5423 PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4... 8.3 — 2016-12-10
CVE-2020-25694 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 an... 8.1 — 2020-11-16
CVE-2021-23214 When the server is configured to use trust authentication with a clientcert requirement or to use cert authent... 8.1 — 2022-03-04
CVE-2026-120148 PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code 8.1 0.5% 2026-11-12
CVE-2016-7048 The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow... 8.1 — 2018-08-21
CVE-2019-10128 A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-su... 7.8 — 2021-03-20
CVE-2019-10211 Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled Ope... 7.8 — 2019-10-29
CVE-2026-6479 PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion 7.5 — 2026-05-14
CVE-2005-0245 Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a... 7.5 — 2005-02-08
CVE-2005-1409 PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which al... 7.5 — 2005-05-03
CVE-2006-2313 PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versi... 7.5 — 2006-05-24
CVE-2006-2314 PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versi... 7.5 — 2006-05-24
CVE-2016-0773 PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1... 7.5 — 2016-02-18
CVE-2017-7484 It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.... 7.5 — 2017-05-13
CVE-2016-0768 PostgreSQL PL/Java after 9.0 does not honor access controls on large objects. 7.5 — 2017-06-07
CVE-2015-3167 contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, an... 7.5 — 2019-11-21
CVE-2017-14798 local privilege escalation in SUSE postgresql init script 7.3 — 2018-03-02
CVE-2007-6601 The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and... 7.2 — 2008-01-10
CVE-2016-5424 PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4... 7.1 — 2016-12-10
CVE-2007-3278 PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link l... 6.9 — 2007-06-20
CVE-2007-4769 The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11,... 6.8 — 2008-01-10
CVE-2007-6067 Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in Postgre... 6.8 — 2008-01-10
CVE-2019-10210 Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser w... 6.7 — 2019-10-29
CVE-2007-0556 The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a t... 6.6 — 2007-02-06
CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel 6.5 — 2026-05-14
CVE-2005-0244 PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using... 6.5 — 2005-02-08
CVE-2005-0247 Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary... 6.5 — 2005-02-08
CVE-2007-6600 PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 us... 6.5 — 2008-01-10
CVE-2009-3230 The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.... 6.5 — 2009-09-17
CVE-2009-4136 PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.... 6.5 — 2009-12-16
CVE-2010-0442 The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote aut... 6.5 — 2010-02-03
CVE-2014-0061 The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9... 6.5 — 2014-03-29
CVE-2014-0063 Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9... 6.5 — 2014-03-29
CVE-2014-0064 Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x b... 6.5 — 2014-03-29
CVE-2014-0065 Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before... 6.5 — 2014-03-29
CVE-2015-5288 The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14,... 6.4 — 2015-10-26
CVE-2007-2138 Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1... 6.0 — 2007-04-25
CVE-2010-1170 The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.... 6.0 — 2010-05-20
CVE-2010-3433 The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22,... 6.0 — 2010-10-07
CVE-2009-4034 PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.... 5.8 — 2009-12-16
CVE-2010-1975 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and... 5.5 — 2010-05-20
CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege 5.4 — 2026-05-14
CVE-2005-0246 The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (cras... 5.0 — 2005-02-08
CVE-2006-0105 PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to caus... 5.0 — 2006-01-11
CVE-2014-0062 Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9... 4.9 — 2014-03-29
CVE-2014-0067 The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb t... 4.6 — 2014-03-29
CVE-2014-8161 PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1... 4.3 — 2020-01-28
CVE-2021-3393 An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user... 4.3 — 2021-04-01
CVE-2026-6474 PostgreSQL timeofday() can disclose portions of server memory 4.3 — 2026-05-14
CVE-2005-0227 PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and... 4.3 — 2005-02-06
CVE-2015-3165 Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before... 4.3 — 2015-05-28
CVE-2018-1115 postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rot... 4.2 — 2018-05-11
CVE-2006-5540 backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial... 4.0 — 2006-10-27
CVE-2006-5541 backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 a... 4.0 — 2006-10-27
CVE-2007-4772 The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11,... 4.0 — 2008-01-10
CVE-2009-0922 PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denia... 4.0 — 2009-03-18
CVE-2014-0060 PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3... 4.0 — 2014-03-29
CVE-2014-0066 The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.... 4.0 — 2014-03-29
CVE-2010-0733 Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2... 3.5 — 2010-03-20
CVE-2005-1410 The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_ini... 2.1 — 2005-05-03
CVE-2006-0678 PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled... 1.5 — 2006-02-15

Verfolgen Sie diese Versionen auf Ihren eigenen Servern

InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.

Live-Demo ausprobieren Jetzt kaufen

Wöchentlicher Digest ausgenutzter Schwachstellen

Die für Self-Hosted-Server relevanten KEV-Neuzugänge, einmal pro Woche. Keine weiteren E-Mails.

Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).