수정 버전
설치된 버전 확인
psql --version8.4 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2013-1902 | PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before... | 10.0 | — | 2013-04-05 | |
| CVE-2013-1903 | PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3... | 10.0 | — | 2013-04-05 | |
| CVE-2015-0244 | PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1... | 9.8 | — | 2020-01-28 | |
| CVE-2015-3166 | The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x befor... | 9.8 | — | 2019-11-21 | |
| CVE-2015-0241 | The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6... | 8.8 | — | 2020-01-28 | |
| CVE-2015-0242 | Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before... | 8.8 | — | 2020-01-28 | |
| CVE-2015-0243 | Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9... | 8.8 | — | 2020-01-28 | |
| CVE-2020-25695 | A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 an... | 8.8 | — | 2020-11-16 | |
| CVE-2019-10127 | A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied... | 8.8 | — | 2021-03-20 | |
| CVE-2026-6473 | PostgreSQL server undersizes allocations, via integer wraparound | 8.8 | — | 2026-05-14 | |
| CVE-2026-6475 | PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice | 8.8 | — | 2026-05-14 | |
| CVE-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | 8.8 | — | 2026-05-14 | |
| CVE-2026-6637 | PostgreSQL refint allows stack buffer overflow and SQL injection | 8.8 | — | 2026-05-14 | |
| CVE-2026-116323 | PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116326 | PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116330 | PostgreSQL pg_dump tar restore.sql fails to block psql command injection | 8.8 | 0.4% | 2026-11-12 | |
| CVE-2026-120145 | PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code | 8.8 | 0.5% | 2026-11-12 | |
| CVE-2026-120147 | PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120149 | PostgreSQL FDW batch-insert mismatch executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120150 | PostgreSQL expanded-record domain-check use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2010-1169 | PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4... | 8.5 | — | 2010-05-20 | |
| CVE-2010-1447 | The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7... | 8.5 | — | 2010-05-20 | |
| CVE-2013-1900 | PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using Op... | 8.5 | — | 2013-04-05 | |
| CVE-2016-5423 | PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4... | 8.3 | — | 2016-12-10 | |
| CVE-2020-25694 | A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 an... | 8.1 | — | 2020-11-16 | |
| CVE-2021-23214 | When the server is configured to use trust authentication with a clientcert requirement or to use cert authent... | 8.1 | — | 2022-03-04 | |
| CVE-2026-120148 | PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code | 8.1 | 0.5% | 2026-11-12 | |
| CVE-2016-7048 | The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow... | 8.1 | — | 2018-08-21 | |
| CVE-2019-10128 | A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-su... | 7.8 | — | 2021-03-20 | |
| CVE-2019-10211 | Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled Ope... | 7.8 | — | 2019-10-29 | |
| CVE-2026-6479 | PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion | 7.5 | — | 2026-05-14 | |
| CVE-2016-0773 | PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1... | 7.5 | — | 2016-02-18 | |
| CVE-2017-7484 | It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.... | 7.5 | — | 2017-05-13 | |
| CVE-2017-7486 | PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses fore... | 7.5 | — | 2017-05-13 | |
| CVE-2016-0768 | PostgreSQL PL/Java after 9.0 does not honor access controls on large objects. | 7.5 | — | 2017-06-07 | |
| CVE-2015-3167 | contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, an... | 7.5 | — | 2019-11-21 | |
| CVE-2017-14798 | local privilege escalation in SUSE postgresql init script | 7.3 | — | 2018-03-02 | |
| CVE-2016-5424 | PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4... | 7.1 | — | 2016-12-10 | |
| CVE-2012-0868 | CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9... | 6.8 | — | 2012-07-19 | |
| CVE-2013-0255 | PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before... | 6.8 | — | 2013-02-13 | |
| CVE-2019-10210 | Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser w... | 6.7 | — | 2019-10-29 | |
| CVE-2026-6478 | PostgreSQL discloses MD5-hashed passwords via covert timing channel | 6.5 | — | 2026-05-14 | |
| CVE-2009-3230 | The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.... | 6.5 | — | 2009-09-17 | |
| CVE-2009-4136 | PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.... | 6.5 | — | 2009-12-16 | |
| CVE-2010-0442 | The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote aut... | 6.5 | — | 2010-02-03 | |
| CVE-2010-4015 | Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in Postg... | 6.5 | — | 2011-02-02 | |
| CVE-2012-0866 | CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.... | 6.5 | — | 2012-07-19 | |
| CVE-2012-3489 | The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.... | 6.5 | — | 2012-10-04 | |
| CVE-2014-0061 | The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9... | 6.5 | — | 2014-03-29 | |
| CVE-2014-0063 | Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9... | 6.5 | — | 2014-03-29 | |
| CVE-2014-0064 | Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x b... | 6.5 | — | 2014-03-29 | |
| CVE-2014-0065 | Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before... | 6.5 | — | 2014-03-29 | |
| CVE-2015-5288 | The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14,... | 6.4 | — | 2015-10-26 | |
| CVE-2010-1170 | The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.... | 6.0 | — | 2010-05-20 | |
| CVE-2010-3433 | The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22,... | 6.0 | — | 2010-10-07 | |
| CVE-2009-4034 | PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.... | 5.8 | — | 2009-12-16 | |
| CVE-2010-1975 | PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and... | 5.5 | — | 2010-05-20 | |
| CVE-2026-6472 | PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | 5.4 | — | 2026-05-14 | |
| CVE-2011-2483 | crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and othe... | 5.0 | — | 2011-08-25 | |
| CVE-2012-3488 | The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and... | 4.9 | — | 2012-10-04 | |
| CVE-2014-0062 | Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9... | 4.9 | — | 2014-03-29 | |
| CVE-2014-0067 | The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb t... | 4.6 | — | 2014-03-29 | |
| CVE-2014-8161 | PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1... | 4.3 | — | 2020-01-28 | |
| CVE-2021-3393 | An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user... | 4.3 | — | 2021-04-01 | |
| CVE-2012-2143 | The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and... | 4.3 | — | 2012-07-05 | |
| CVE-2026-6474 | PostgreSQL timeofday() can disclose portions of server memory | 4.3 | — | 2026-05-14 | |
| CVE-2012-0867 | PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 3... | 4.3 | — | 2012-07-19 | |
| CVE-2015-3165 | Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before... | 4.3 | — | 2015-05-28 | |
| CVE-2018-1115 | postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rot... | 4.2 | — | 2018-05-11 | |
| CVE-2009-3229 | The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remot... | 4.0 | — | 2009-09-17 | |
| CVE-2012-2655 | PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote... | 4.0 | — | 2012-07-19 | |
| CVE-2014-0060 | PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3... | 4.0 | — | 2014-03-29 | |
| CVE-2014-0066 | The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.... | 4.0 | — | 2014-03-29 | |
| CVE-2010-0733 | Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2... | 3.5 | — | 2010-03-20 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).