Known vulnerabilities in postgresql (Alpine package)

Vendor: Alpine Linux Development Team
Software: postgresql (Alpine package)
Software CPE: cpe:2.3:o:alpine:postgresql_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 47
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting postgresql (Alpine package) postgresql (Alpine package) is affected by 47 known vulnerabilities: 1 critical, 2 high, 15 medium, 29 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25333 - Improper Authorization
CVE-2020-1720		 CWE-285 Low
No
No
 10.12-r0, 11.7-r0 13.02.2020 SB2020021329
SB2020021411
SB2020021412
and 21 more
#VU20003 - Permissions, Privileges, and Access Controls
CVE-2019-10208		 CWE-264 Low
No
No
 10.10-r0, 11.5-r0 08.08.2019 SB2019080820
SB2019080904
SB2019080905
and 27 more
#VU18861 - Stack-based buffer overflow
CVE-2019-10164		 CWE-121 Medium
No
No
 10.9-r0, 11.4-r0 20.06.2019 SB2019062003
SB2019062104
SB2019072103
and 14 more
#VU18424 - Permissions, Privileges, and Access Controls
CVE-2019-10130		 CWE-264 Low
No
No
 9.6.13-r0 10.05.2019 SB2019051001
SB2019051002
SB2019051513
and 29 more
#VU18423 - Missing release of memory after effective lifetime
CVE-2019-10129		 CWE-401 Low
No
No
 9.6.13-r0 10.05.2019 SB2019051001
SB2019051513
SB2020031233
and 4 more
#VU15796 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-16850		 CWE-89 Low
No
No
 11.1-r0 09.11.2018 SB2018111202
SB2018112603
SB2018120302
and 5 more
#VU14327 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10925		 CWE-200 Low
No
No
 9.6.10-r0 13.08.2018 SB2018081310
SB2018081311
SB2018082316
and 15 more
#VU14326 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-10915		 CWE-89 Low
No
No
 9.6.10-r0 11.08.2018 SB2018081310
SB2018081311
SB2018082316
and 20 more
#VU12652 - Improper Access Control
CVE-2018-1115		 CWE-284 Medium
No
No
 9.5.13-r0 15.05.2018 SB2018051509
SB2018061712
SB2018070602
and 10 more
#VU10810 - Uncontrolled Search Path Element
CVE-2018-1058		 CWE-427 Low
No
No
 9.5.12-r0 02.03.2018 SB2018030209
SB2018031101
SB2018040602
and 6 more
#VU10439 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1053		 CWE-200 Low
No
No
 9.5.11-r0 09.02.2018 SB2018020908
SB2018020913
SB2018022307
and 4 more
#VU10437 - Improper input validation
CVE-2018-1052		 CWE-20 Low
No
No
 10.2-r0 09.02.2018 SB2018020908
SB2018020931
#VU9168 - Data Handling
CVE-2017-15098		 CWE-19 Low
No
No
 9.4.15-r0 10.11.2017 SB2017111003
SB2017111004
SB2017111005
and 9 more
#VU9167 - Permissions, Privileges, and Access Controls
CVE-2017-15099		 CWE-264 Low
No
No
 9.5.10-r0 10.11.2017 SB2017111004
SB2017111005
SB2017111008
and 7 more
#VU7875 - Improper Access Control
CVE-2017-7547		 CWE-284 Low
No
No
 9.4.13-r0 15.08.2017 SB2017081007
SB2017082305
SB2017082405
and 21 more
#VU7874 - Improper Access Control
CVE-2017-7548		 CWE-284 Low
No
No
 9.4.13-r0 15.08.2017 SB2017081007
SB2017082305
SB2017082405
and 19 more
#VU7873 - Improper Access Control
CVE-2017-7546		 CWE-284 Low
No
No
 9.4.13-r0 15.08.2017 SB2017081007
SB2017082305
SB2017082405
and 22 more
#VU6892 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7484		 CWE-200 Low
No
No
 9.4.12-r0 02.06.2017 SB2017052914
SB2017052915
SB2017073109
and 20 more
#VU6893 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-7485		 CWE-300 Low
No
No
 9.4.12-r0 02.06.2017 SB2017052914
SB2017052915
SB2017073109
and 7 more
#VU6894 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7486		 CWE-200 Low
No
No
 9.4.12-r0 02.06.2017 SB2017052914
SB2017052915
SB2017073109
and 8 more


Showing elements 1 - 20 out of 47