Lucene search
Ubuntu.comUB:CVE-2013-1900HistoryApr 04, 2013 - 12:00 a.m.
CVE-2013-1900
2013-04-0400:00:00
ubuntu.com
ubuntu.com
10
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.008 Low
EPSS
Percentile
81.9%
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and
8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random
numbers, which might allow remote authenticated users to have an
unspecified impact via vectors related to the “contrib/pgcrypto functions.”
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | postgresql-8.3 | < 8.3.23-0ubuntu8.04.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | postgresql-8.4 | < 8.4.17-0ubuntu10.04 | UNKNOWN |
| ubuntu | 12.04 | noarch | postgresql-8.4 | < 8.4.17-0ubuntu12.04 | UNKNOWN |
| ubuntu | 11.10 | noarch | postgresql-9.1 | < 9.1.9-0ubuntu11.10 | UNKNOWN |
| ubuntu | 12.04 | noarch | postgresql-9.1 | < 9.1.9-0ubuntu12.04 | UNKNOWN |
| ubuntu | 12.10 | noarch | postgresql-9.1 | < 9.1.9-0ubuntu12.10 | UNKNOWN |
| ubuntu | 13.04 | noarch | postgresql-9.1 | < 9.1.9-1ubuntu1 | UNKNOWN |
Related
postgresql
postgresql
Vulnerability in contrib module (CVE-2013-1900)
2013-04-04 17:55:00
prion
prion
Code injection
2013-04-04 17:55:00
veracode
veracode
Weak Random Number Generator
2019-05-02 04:56:48
openvas
openvas
PostgreSQL Unspecified Vulnerability (Apr 2013) - Windows
2013-04-09 00:00:00
CentOS Update for postgresql84 CESA-2013:1475 centos5
2013-11-08 00:00:00
Oracle: Security Advisory (ELSA-2013-1475)
2015-10-06 00:00:00
cvelist
cvelist
CVE-2013-1900
2013-04-04 17:00:00
nessus
nessus
PostgreSQL 8.4 < 8.4.17 / 9.0 < 9.0.13 / 9.1 < 9.1.9 / 9.2 < 9.2.4 Predictable Random Number Generator
2013-04-08 00:00:00
CentOS 5 / 6 : postgresql / postgresql84 (CESA-2013:1475)
2013-10-30 00:00:00
Amazon Linux AMI : postgresql8 (ALAS-2013-244)
2013-11-14 00:00:00
cve
cve
CVE-2013-1900
2013-04-04 17:55:00
redhat
redhat
(RHSA-2013:1475) Moderate: postgresql and postgresql84 security update
2013-10-29 00:00:00
centos
centos
postgresql, postgresql84 security update
2013-10-29 20:28:29
oraclelinux
oraclelinux
postgresql and postgresql84 security update
2013-10-29 00:00:00
amazon
amazon
Medium: postgresql8
2013-11-03 12:09:00
Critical: postgresql9
2013-04-04 11:49:00
debian
debian
[BSA-080] Security Update for postgresql-9.1
2013-04-08 08:27:20
[SECURITY] [DSA 2658-1] postgresql-9.1 security update
2013-04-04 14:06:34
[SECURITY] [DSA 2657-1] postgresql-8.4 security update
2013-04-04 14:05:19
securityvulns
securityvulns
PostgreSQL multiple security vulnerabilities
2013-04-08 00:00:00
[USN-1789-1] PostgreSQL vulnerabilities
2013-04-08 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2013-04-04 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: postgresql-9.2.4-1.fc19
2013-04-20 19:59:46
[SECURITY] Fedora 18 Update: postgresql-9.2.4-1.fc18
2013-04-05 22:59:41
[SECURITY] Fedora 17 Update: postgresql-9.1.9-1.fc17
2013-04-05 23:11:53
suse
suse
postgresql92: Various security fixes. Update to 9.2.4. (important)
2013-04-05 10:04:42
Security update for PostgreSQL (important)
2013-04-05 19:06:20
postgresql91 to version 9.1.9. (important)
2013-04-05 10:04:26
freebsd
freebsd
PostgreSQL -- anonymous remote access data corruption vulnerability
2013-04-04 00:00:00
osv
osv
postgresql-9.1 - several
2013-04-04 00:00:00
vmware
vmware
VMware vFabric Postgres security updates
2013-04-04 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2014-08-29 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.008 Low
EPSS
Percentile
81.9%
Related for UB:CVE-2013-1900