CVE-2017-7548

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
postgresqlpostgresql
9.4 ≤
𝑥
< 9.4.13
postgresqlpostgresql
9.5 ≤
𝑥
< 9.5.8
postgresqlpostgresql
9.6 ≤
𝑥
< 9.6.4
debiandebian_linux
8.0
debiandebian_linux
9.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
postgresql-10
artful
dne
bionic
not-affected
cosmic
not-affected
disco
dne
trusty
dne
xenial
dne
zesty
dne
postgresql-9.1
artful
dne
bionic
dne
cosmic
dne
disco
dne
trusty
dne
xenial
dne
zesty
dne
postgresql-9.3
artful
dne
bionic
dne
cosmic
dne
disco
dne
trusty
Fixed 9.3.18-0ubuntu0.14.04.1
released
xenial
dne
zesty
dne
postgresql-9.5
artful
dne
bionic
dne
cosmic
dne
disco
dne
trusty
dne
xenial
Fixed 9.5.8-0ubuntu0.16.04.1
released
zesty
dne
postgresql-9.6
artful
not-affected
bionic
dne
cosmic
dne
disco
dne
trusty
dne
xenial
dne
zesty
Fixed 9.6.4-0ubuntu0.17.04.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libecpg6
suse enterprise sap 12 SP2
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP3
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12
9.6.4-3.6.1
fixed
suse enterprise server 12 SP1
9.6.4-3.6.1
fixed
suse enterprise server 12 SP2
9.6.4-3.6.1
fixed
suse enterprise server 12 SP3
9.6.4-3.6.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
libpq5
suse enterprise sap 12 SP2
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP3
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12
9.6.4-3.6.1
fixed
suse enterprise server 12 SP1
9.6.4-3.6.1
fixed
suse enterprise server 12 SP2
9.6.4-3.6.1
fixed
suse enterprise server 12 SP3
9.6.4-3.6.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
libpq5-32bit
suse enterprise sap 12 SP2
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP3
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12
9.6.4-3.6.1
fixed
suse enterprise server 12 SP1
9.6.4-3.6.1
fixed
suse enterprise server 12 SP2
9.6.4-3.6.1
fixed
suse enterprise server 12 SP3
9.6.4-3.6.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql10
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql10-contrib
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql10-docs
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql10-plperl
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql10-plpython
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql10-pltcl
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql10-server
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql93
suse enterprise server 12
9.3.18-25.5.1
fixed
postgresql93-contrib
suse enterprise server 12
9.3.18-25.5.1
fixed
postgresql93-docs
suse enterprise server 12
9.3.18-25.5.1
fixed
postgresql93-server
suse enterprise server 12
9.3.18-25.5.1
fixed
postgresql94
suse enterprise sap 12 SP2
9.4.13-21.5.1
fixed
suse enterprise server 12
9.4.13-21.5.1
fixed
suse enterprise server 12 SP1
9.4.13-21.5.1
fixed
suse enterprise server 12 SP2
9.4.13-21.5.1
fixed
postgresql94-contrib
suse enterprise sap 12 SP2
9.4.13-21.5.1
fixed
suse enterprise server 12
9.4.13-21.5.1
fixed
suse enterprise server 12 SP1
9.4.13-21.5.1
fixed
suse enterprise server 12 SP2
9.4.13-21.5.1
fixed
postgresql94-docs
suse enterprise sap 12 SP2
9.4.13-21.5.1
fixed
suse enterprise server 12
9.4.13-21.5.1
fixed
suse enterprise server 12 SP1
9.4.13-21.5.1
fixed
suse enterprise server 12 SP2
9.4.13-21.5.1
fixed
postgresql94-server
suse enterprise sap 12 SP2
9.4.13-21.5.1
fixed
suse enterprise server 12
9.4.13-21.5.1
fixed
suse enterprise server 12 SP1
9.4.13-21.5.1
fixed
suse enterprise server 12 SP2
9.4.13-21.5.1
fixed
postgresql96
suse enterprise sap 12 SP2
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP3
9.6.4-3.6.1
fixed
suse enterprise server 12
9.6.4-3.6.1
fixed
suse enterprise server 12 SP1
9.6.4-3.6.1
fixed
suse enterprise server 12 SP2
9.6.4-3.6.1
fixed
suse enterprise server 12 SP3
9.6.4-3.6.1
fixed
postgresql96-contrib
suse enterprise sap 12 SP2
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP3
9.6.4-3.6.1
fixed
suse enterprise server 12
9.6.4-3.6.1
fixed
suse enterprise server 12 SP1
9.6.4-3.6.1
fixed
suse enterprise server 12 SP2
9.6.4-3.6.1
fixed
suse enterprise server 12 SP3
9.6.4-3.6.1
fixed
postgresql96-docs
suse enterprise sap 12 SP2
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP3
9.6.4-3.6.1
fixed
suse enterprise server 12
9.6.4-3.6.1
fixed
suse enterprise server 12 SP1
9.6.4-3.6.1
fixed
suse enterprise server 12 SP2
9.6.4-3.6.1
fixed
suse enterprise server 12 SP3
9.6.4-3.6.1
fixed
postgresql96-server
suse enterprise sap 12 SP2
9.6.4-3.6.1
fixed
suse enterprise sap 12 SP3
9.6.4-3.6.1
fixed
suse enterprise server 12
9.6.4-3.6.1
fixed
suse enterprise server 12 SP1
9.6.4-3.6.1
fixed
suse enterprise server 12 SP2
9.6.4-3.6.1
fixed
suse enterprise server 12 SP3
9.6.4-3.6.1
fixed
Common Weakness Enumeration
References
http://www.debian.org/security/2017/dsa-3935
http://www.debian.org/security/2017/dsa-3936
http://www.securityfocus.com/bid/100276
http://www.securitytracker.com/id/1039142
https://access.redhat.com/errata/RHSA-2017:2677
https://access.redhat.com/errata/RHSA-2017:2678
https://security.gentoo.org/glsa/201710-06
https://www.postgresql.org/about/news/1772/
http://www.debian.org/security/2017/dsa-3935
http://www.debian.org/security/2017/dsa-3936
http://www.securityfocus.com/bid/100276
http://www.securitytracker.com/id/1039142
https://access.redhat.com/errata/RHSA-2017:2677
https://access.redhat.com/errata/RHSA-2017:2678
https://security.gentoo.org/glsa/201710-06
https://www.postgresql.org/about/news/1772/