InfraGuard
Iniciar sesión Pruébalo ahora Comprar ahora

Vulnerabilidades de PostgreSQL 9.4

55 CVE conocidos afectan a la rama 9.4 de PostgreSQL.

9.8 CVSS máx.Soporte finalizado el 2020-02-13

Corregido en

9.4.19.4.29.4.59.4.69.4.109.4.139.4.169.4.179.4.199.4.229.4.24
Comprueba tu versiónpsql --version

CVE que afectan a 9.4

CVE Título CVSS Explotada EPSS Publicación
CVE-2015-0244 PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1... 9.8 — 2020-01-28
CVE-2017-7546 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication... 9.8 — 2017-08-17
CVE-2015-3166 The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x befor... 9.8 — 2019-11-21
CVE-2015-0241 The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6... 8.8 — 2020-01-28
CVE-2015-0242 Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before... 8.8 — 2020-01-28
CVE-2015-0243 Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9... 8.8 — 2020-01-28
CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 an... 8.8 — 2020-11-16
CVE-2019-10127 A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied... 8.8 — 2021-03-20
CVE-2026-6473 PostgreSQL server undersizes allocations, via integer wraparound 8.8 — 2026-05-14
CVE-2026-6475 PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice 8.8 — 2026-05-14
CVE-2026-6477 PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory 8.8 — 2026-05-14
CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection 8.8 — 2026-05-14
CVE-2026-116323 PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code 8.8 0.6% 2026-11-12
CVE-2026-116326 PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf 8.8 0.6% 2026-11-12
CVE-2026-116330 PostgreSQL pg_dump tar restore.sql fails to block psql command injection 8.8 0.4% 2026-11-12
CVE-2026-120145 PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code 8.8 0.5% 2026-11-12
CVE-2026-120147 PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code 8.8 0.6% 2026-11-12
CVE-2026-120149 PostgreSQL FDW batch-insert mismatch executes arbitrary code 8.8 0.6% 2026-11-12
CVE-2026-120150 PostgreSQL expanded-record domain-check use-after-free executes arbitrary code 8.8 0.6% 2026-11-12
CVE-2016-0766 PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1... 8.8 — 2016-02-18
CVE-2017-7547 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowi... 8.8 — 2017-08-17
CVE-2018-1058 A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An at... 8.8 — 2018-03-03
CVE-2018-10915 A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset... 8.5 — 2018-08-10
CVE-2016-5423 PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4... 8.3 — 2016-12-10
CVE-2020-25694 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 an... 8.1 — 2020-11-16
CVE-2021-23214 When the server is configured to use trust authentication with a clientcert requirement or to use cert authent... 8.1 — 2022-03-04
CVE-2026-120148 PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code 8.1 0.5% 2026-11-12
CVE-2017-15098 Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6... 8.1 — 2017-11-23
CVE-2016-7048 The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow... 8.1 — 2018-08-21
CVE-2019-10128 A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-su... 7.8 — 2021-03-20
CVE-2019-10211 Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled Ope... 7.8 — 2019-10-29
CVE-2026-6479 PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion 7.5 — 2026-05-14
CVE-2016-0773 PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1... 7.5 — 2016-02-18
CVE-2017-7484 It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.... 7.5 — 2017-05-13
CVE-2017-7486 PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses fore... 7.5 — 2017-05-13
CVE-2017-7548 PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authen... 7.5 — 2017-08-17
CVE-2019-10208 A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10... 7.5 — 2019-10-29
CVE-2015-3167 contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, an... 7.5 — 2019-11-21
CVE-2020-14350 It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An a... 7.3 — 2020-08-24
CVE-2020-10733 The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-quali... 7.3 — 2020-09-16
CVE-2019-9193 In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_exe... 7.2 — 2019-04-01
CVE-2016-5424 PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4... 7.1 — 2016-12-10
CVE-2018-1053 In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x befor... 7.0 — 2018-02-09
CVE-2017-12172 PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20... 6.7 — 2017-11-23
CVE-2019-10210 Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser w... 6.7 — 2019-10-29
CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel 6.5 — 2026-05-14
CVE-2015-5288 The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14,... 6.4 — 2015-10-26
CVE-2015-5289 Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x befor... 6.4 — 2015-10-26
CVE-2017-7485 In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was fou... 5.9 — 2017-05-13
CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege 5.4 — 2026-05-14
CVE-2014-8161 PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1... 4.3 — 2020-01-28
CVE-2021-3393 An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user... 4.3 — 2021-04-01
CVE-2026-6474 PostgreSQL timeofday() can disclose portions of server memory 4.3 — 2026-05-14
CVE-2015-3165 Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before... 4.3 — 2015-05-28
CVE-2018-1115 postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rot... 4.2 — 2018-05-11

Controla estas versiones en tus propios servidores

InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.

Prueba la demo en vivo Comprar ahora

Resumen semanal de vulnerabilidades explotadas

Las incorporaciones a KEV relevantes para servidores autoalojados, una vez por semana. Ningún otro correo.

Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).