Lucene search
K

110 matches found

OSV
OSV
added 2026/03/30 3:24 p.m.0 views

SUSE-SU-2026:20986-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: Security fixes: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected naming conflicts bsc1253332 -...

5.9CVSS6.7AI score0.00061EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/03/02 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-13 (UTSA-2026-005383)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005383 advisory. Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in...

3.1CVSS6AI score0.00061EPSS
Exploits0References4
OSV
OSV
added 2026/02/20 4:17 p.m.1 views

SUSE-SU-2026:20588-1 Security update for postgresql15

This update for postgresql15 fixes the following issues: Update to version 15.16. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. - CVE-2026-2004: intarray missing validation of type of input to selectivit...

8.8CVSS6.4AI score0.00061EPSS
Exploits3References13
OSV
OSV
added 2026/02/20 4:14 p.m.1 views

OPENSUSE-SU-2026:20265-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. - CVE-2026-2004: intarray missing validation of type of input to selectivit...

8.8CVSS6.4AI score0.00061EPSS
Exploits3References12
OSV
OSV
added 2026/02/20 4:11 p.m.1 views

SUSE-SU-2026:20587-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. - CVE-2026-2004: intarray missing validation of type of input to selectivit...

8.8CVSS6.4AI score0.00061EPSS
Exploits3References13
OSV
OSV
added 2026/01/29 10:55 a.m.0 views

OPENSUSE-SU-2026:20130-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: Security fixes: - CVE-2025-12817: Missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected naming conflicts bsc1253332 - CVE-2025-12818...

5.9CVSS6.2AI score0.00061EPSS
Exploits0References4
Redos
Redos
added 2026/01/29 12:0 a.m.4 views

ROS-20260129-73-0034

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

3.1CVSS5.9AI score0.00061EPSS
Exploits0
Redos
Redos
added 2026/01/29 12:0 a.m.4 views

ROS-20260129-73-0033

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

3.1CVSS5.9AI score0.00061EPSS
Exploits0
Redos
Redos
added 2026/01/29 12:0 a.m.3 views

ROS-20260129-73-0029

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

3.1CVSS5.9AI score0.00061EPSS
Exploits0
Redos
Redos
added 2026/01/29 12:0 a.m.3 views

ROS-20260129-73-0028

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

3.1CVSS5.9AI score0.00061EPSS
Exploits0
Redos
Redos
added 2026/01/29 12:0 a.m.3 views

ROS-20260129-73-0032

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

3.1CVSS5.9AI score0.00061EPSS
Exploits0
Redos
Redos
added 2026/01/29 12:0 a.m.3 views

ROS-20260129-73-0035

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

3.1CVSS5.9AI score0.00061EPSS
Exploits0
Redos
Redos
added 2026/01/29 12:0 a.m.4 views

ROS-20260129-73-0031

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

3.1CVSS5.9AI score0.00061EPSS
Exploits0
Redos
Redos
added 2026/01/29 12:0 a.m.4 views

ROS-20260129-73-0030

A vulnerability in the CREATE STATISTICS function of the PostgreSQL database management system is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

3.1CVSS5.9AI score0.00061EPSS
Exploits0
OSV
OSV
added 2026/01/27 12:26 p.m.4 views

CLSA-2026-1769516785 postgresql: Fix of CVE-2025-12817

CVE-2025-12817: fix missing CREATE privilege check on target schema in CREATE STATISTICS, preventing unauthorized statistics creation...

3.1CVSS5.8AI score0.00061EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:0 a.m.2 views

AlmaLinux 8 : postgresql:15 (ALSA-2026:0524)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:0524 advisory. postgresql: CREATE STATISTICS does not check for schema CREATE privilege CVE-2025-12817 postgresql: libpq undersizes allocations, via integer wraparound...

5.9CVSS5.6AI score0.00061EPSS
Exploits0References4
OSV
OSV
added 2026/01/14 9:11 a.m.2 views

RLSA-2026:0492 Moderate: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: CREATE STATISTICS does not check for schema CREATE privilege CVE-2025-12817 postgresql: libpq undersizes allocations, via integer wraparound CVE-2025-12818 For more details about the security...

7.5CVSS6.7AI score0.00061EPSS
Exploits0References3
Rockylinux
Rockylinux
added 2026/01/14 9:11 a.m.1 views

postgresql:15 security update

An update is available for pgrepack, module.postgresql, module.pgaudit, postgresql, postgres-decoderbufs, module.pgrepack, module.postgres-decoderbufs, pgaudit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

5.9CVSS7AI score0.00061EPSS
Exploits0
OSV
OSV
added 2026/01/14 9:11 a.m.3 views

RLSA-2026:0493 Moderate: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: CREATE STATISTICS does not check for schema CREATE privilege CVE-2025-12817 postgresql: libpq undersizes allocations, via integer wraparound CVE-2025-12818 For more details about the security...

7.5CVSS6.7AI score0.00061EPSS
Exploits0References3
OSV
OSV
added 2026/01/14 9:11 a.m.4 views

RLSA-2026:0491 Moderate: postgresql security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: CREATE STATISTICS does not check for schema CREATE privilege CVE-2025-12817 postgresql: libpq undersizes allocations, via integer wraparound CVE-2025-12818 For more details about the security...

7.5CVSS6.7AI score0.00061EPSS
Exploits0References3
Rows per page
Query Builder