Known vulnerabilities in postgresql (Red Hat package)
Vendor:
Red Hat Inc.
Software:
postgresql (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:postgresql_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
30
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
13.23-1.el9_2.3
13.23-1.el9_6.3
9.2.24-9.el7_9.6
13.23-1.el9_2.1
13.23-1.el9_6.1
13.23-1.el9_4.1
13.23-1.el9_0.1
13.23-2.el9_7
13.23-1.el9_7
13.23-1.el9_2
13.23-1.el9_0
13.23-1.el9_4
9.2.24-9.el7_9.4
13.22-1.el9_4
13.22-1.el9_6
13.22-1.el9_0
13.22-1.el9_2
9.2.24-9.el7_9.3
13.20-1.el9_5
13.20-1.el9_0
13.20-1.el9_2
13.20-1.el9_4
9.2.24-9.el7_9.2
13.18-1.el9_2
13.18-1.el9_0
13.18-1.el9_5
13.18-1.el9_4
9.2.24-9.el7_9.1
13.16-1.el9_2
13.16-1.el9_0
13.16-1.el9_4
7.4.30-1.el4_8.2
8.1.23-1.el5_6.1
8.4.7-1.el6_0.1
8.4.5-1.el6_0.2
7.4.30-1.el4_8.1
8.1.22-1.el5_5.1
8.1.21-1.el5_5.1
7.4.29-1.el4_8.1
7.4.26-1.el4_8.1
8.1.18-2.el5_4.1
7.4.19-1.el4_6.1
8.1.11-1.el5_1.1
8.1.9-1.el4s1.1
8.1.7-3.el4s1.1
13.14-1.el9_2
13.14-1.el9_0
13.14-1.el9_3
13.13-1.el9_3
9.2.24-9.el7_9
13.13-1.el9_2
13.13-1.el9_0
13.11-1.el9_2
13.10-1.el9_1
9.2.24-8.el7_9
13.7-1.el9_0
9.2.24-7.el7_9
9.2.24-6.el7_9
9.2.24-1.el7_5
9.2.23-3.el7_4
9.2.23-1.el7_4
9.2.21-1.el7
8.1.8-1.el5
8.1.9-1.el5
8.2.6-1.el5s2
8.2.9-1.el5s2
8.2.11-1.el5s2
8.2.13-2.el5s2
7.4.30-3.el4
8.1.23-4.el5_8
8.1.23-5.el5_8
8.1.23-6.el5_8
8.1.23-10.el5_10
9.2.13-1.el7_1
9.2.14-1.el7_1
9.2.15-1.el7_2
9.2.18-1.el7
8.4.20-8.el6_9
8.4.20-7.el6
8.4.20-6.el6
8.4.20-5.el6_7
8.4.20-4.el6_7
8.4.20-3.el6_6
8.4.20-2.el6_6
8.4.20-1.el6_5
8.4.18-1.el6_4
8.4.13-1.el6_3
8.4.12-1.el6_2
8.4.11-1.el6_2
8.4.9-1.el6_1
8.4.7-2.el6
8.4.7-1.el6_0
8.4.5-1.el6_0
8.4.4-2.el6
Vulnerabilities (30)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131455 - Integer overflow CVE-2026-6473 |
CWE-190 | Low | 9.2.24-9.el7_9.6 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 55 more |
||
| #VU131459 - Stack-based buffer overflow CVE-2026-6477 |
CWE-121 | High | 9.2.24-9.el7_9.6 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 51 more |
||
| #VU131460 - Information Exposure Through Timing Discrepancy CVE-2026-6478 |
CWE-208 | Medium | 9.2.24-9.el7_9.6 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 50 more |
||
| #VU131463 - Stack-based buffer overflow CVE-2026-6637 |
CWE-121 | Medium | 9.2.24-9.el7_9.6, 13.23-1.el9_2.3, 13.23-1.el9_6.3 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 29 more |
||
| #VU122779 - Memory corruption CVE-2026-2006 |
CWE-119 | Medium | 13.23-1.el9_0.1, 13.23-1.el9_2.1, 13.23-1.el9_4.1, 13.23-1.el9_6.1, 13.23-2.el9_7 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 69 more |
||
| #VU122778 - Heap-based Buffer Overflow CVE-2026-2005 |
CWE-122 | Medium | 13.23-1.el9_0.1, 13.23-1.el9_2.1, 13.23-1.el9_4.1, 13.23-1.el9_6.1, 13.23-2.el9_7 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 60 more |
||
| #VU122777 - Type confusion CVE-2026-2004 |
CWE-843 | Medium | 13.23-1.el9_0.1, 13.23-1.el9_2.1, 13.23-1.el9_4.1, 13.23-1.el9_6.1, 13.23-2.el9_7 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 60 more |
||
| #VU118520 - Integer overflow CVE-2025-12818 |
CWE-190 | Medium | 13.23-1.el9_0, 13.23-1.el9_2, 13.23-1.el9_4, 13.23-1.el9_7 | 13.11.2025 |
SB2025111368 SB2025112204 SB2025112205 and 64 more |
||
| #VU118519 - Missing Authorization CVE-2025-12817 |
CWE-862 | Low | 13.23-1.el9_0, 13.23-1.el9_2, 13.23-1.el9_4, 13.23-1.el9_7 | 13.11.2025 |
SB2025111368 SB2025112204 SB2025112205 and 49 more |
||
| #VU114096 - Improper input validation CVE-2025-8715 |
CWE-20 | Medium | 13.22-1.el9_0, 13.22-1.el9_2, 13.22-1.el9_4, 13.22-1.el9_6 | 14.08.2025 |
SB2025081496 SB2025081898 SB2025082551 and 52 more |
||
| #VU114095 - Improper Control of Generation of Code ('Code Injection') CVE-2025-8714 |
CWE-94 | Low | 9.2.24-9.el7_9.4, 13.22-1.el9_0, 13.22-1.el9_2, 13.22-1.el9_4, 13.22-1.el9_6 | 14.08.2025 |
SB2025081496 SB2025081898 SB2025082551 and 60 more |
||
| #VU103970 - Improper input validation CVE-2025-1094 |
CWE-20 | Critical | 9.2.24-9.el7_9.3, 13.20-1.el9_0, 13.20-1.el9_2, 13.20-1.el9_4, 13.20-1.el9_5 | 14.02.2025 |
SB2025021408 SB2025022038 SB2025022039 and 78 more |
||
| #VU100514 - Improper Authorization CVE-2024-10979 |
CWE-285 | High | 9.2.24-9.el7_9.2, 13.18-1.el9_0, 13.18-1.el9_2, 13.18-1.el9_4, 13.18-1.el9_5 | 15.11.2024 |
SB2024111502 SB2024111601 SB2024112245 and 65 more |
||
| #VU100513 - Incorrect Privilege Assignment CVE-2024-10978 |
CWE-266 | Medium | 13.18-1.el9_5 | 15.11.2024 |
SB2024111502 SB2024111601 SB2024112245 and 46 more |
||
| #VU100511 - Improper Privilege Management CVE-2024-10976 |
CWE-269 | Medium | 13.18-1.el9_5 | 15.11.2024 |
SB2024111502 SB2024111601 SB2024112245 and 47 more |
||
| #VU95605 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2024-7348 |
CWE-367 | Low | 9.2.24-9.el7_9.1, 13.16-1.el9_0, 13.16-1.el9_2, 13.16-1.el9_4 | 08.08.2024 |
SB2024080866 SB2024080954 SB2024080955 and 63 more |
||
| #VU86275 - Improper Privilege Management CVE-2024-0985 |
CWE-269 | Medium | 13.14-1.el9_0, 13.14-1.el9_2, 13.14-1.el9_3 | 08.02.2024 |
SB2024020869 SB2024021617 SB2024021637 and 62 more |
||
| #VU82943 - Permissions, Privileges, and Access Controls CVE-2023-5870 |
CWE-264 | Low | 13.13-1.el9_0, 13.13-1.el9_2, 13.13-1.el9_3 | 09.11.2023 |
SB2023110930 SB2023111320 SB2023111324 and 54 more |
||
| #VU82941 - Exposure of sensitive information to an unauthorized actor CVE-2023-5868 |
CWE-200 | Low | 13.13-1.el9_0, 13.13-1.el9_2, 13.13-1.el9_3 | 09.11.2023 |
SB2023110930 SB2023111320 SB2023111324 and 53 more |
||
| #VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-39417 |
CWE-89 | Medium | 13.13-1.el9_0, 13.13-1.el9_2, 13.13-1.el9_3 | 11.08.2023 |
SB2023081132 SB2023081715 SB2023081716 and 60 more |
Showing elements 1 - 20 out of 30