CVE-2014-8161
27.01.2020, 16:15
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| postgresql | postgresql | 𝑥 < 9.0.19 |
| postgresql | postgresql | 9.1.0 ≤ 𝑥 < 9.1.15 |
| postgresql | postgresql | 9.2.0 ≤ 𝑥 < 9.2.10 |
| postgresql | postgresql | 9.3.0 ≤ 𝑥 < 9.3.6 |
| postgresql | postgresql | 9.4.0 ≤ 𝑥 < 9.4.1 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| postgresql-8.4 |
| ||||||||||||||||||
| postgresql-9.1 |
| ||||||||||||||||||
| postgresql-9.3 |
| ||||||||||||||||||
| postgresql-9.4 |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| postgresql |
| ||||
| postgresql-contrib |
| ||||
| postgresql-devel |
| ||||
| postgresql-docs |
| ||||
| postgresql-libs |
| ||||
| postgresql-plperl |
| ||||
| postgresql-plpython |
| ||||
| postgresql-pltcl |
| ||||
| postgresql-server |
| ||||
| postgresql-test |
| ||||
| postgresql-upgrade |
|
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| postgresql8 |
| ||
| postgresql8-contrib |
| ||
| postgresql8-debuginfo |
| ||
| postgresql8-devel |
| ||
| postgresql8-docs |
| ||
| postgresql8-libs |
| ||
| postgresql8-plperl |
| ||
| postgresql8-plpython |
| ||
| postgresql8-pltcl |
| ||
| postgresql8-server |
| ||
| postgresql8-test |
| ||
| postgresql92 |
| ||
| postgresql92-contrib |
| ||
| postgresql92-debuginfo |
| ||
| postgresql92-devel |
| ||
| postgresql92-docs |
| ||
| postgresql92-libs |
| ||
| postgresql92-plperl |
| ||
| postgresql92-plpython |
| ||
| postgresql92-pltcl |
| ||
| postgresql92-server |
| ||
| postgresql92-server-compat |
| ||
| postgresql92-test |
|
Common Weakness Enumeration
References