Known vulnerabilities in postgresql-16 (Ubuntu package)

Vendor: Canonical Ltd.
Software: postgresql-16 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:postgresql-16_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting postgresql-16 (Ubuntu package) postgresql-16 (Ubuntu package) is affected by 7 known vulnerabilities: 1 critical, 1 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103970 - Improper input validation
CVE-2025-1094		 CWE-20 Critical
Available
Exploited
 16.8-0ubuntu0.24.04.1, 16.8-0ubuntu0.24.10.1 14.02.2025 SB2025021408
SB2025022038
SB2025022039
and 78 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 16.6-0ubuntu0.24.04.1, 16.6-0ubuntu0.24.10.1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 16.6-0ubuntu0.24.04.1, 16.6-0ubuntu0.24.10.1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 16.6-0ubuntu0.24.04.1, 16.6-0ubuntu0.24.10.1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 16.6-0ubuntu0.24.04.1, 16.6-0ubuntu0.24.10.1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU95605 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-7348		 CWE-367 Low
No
No
 16.4-0ubuntu0.24.04.1 08.08.2024 SB2024080866
SB2024080954
SB2024080955
and 63 more
#VU89297 - Missing Authorization
CVE-2024-4317		 CWE-862 Low
No
No
 16.3-0ubuntu0.24.04.1 09.05.2024 SB2024050940
SB2024051519
SB2024051525
and 28 more