CVE-2017-7548

State: Published
Severity: Not scored
Published: Aug 16, 2017
Updated: Sep 16, 2024
Reserved: Apr 5, 2017

Description

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.

Scores

The record has no CVSS score.

Weaknesses

CWE-862

Affected Products

Product	Versions
postgresqlPostgreSQL	9.4.x before 9.4.13Affected 9.5.x before 9.5.8Affected 9.6.x before 9.6.4Affected

References

DSA-3936vendor-advisory
RHSA-2017:2678vendor-advisory
DSA-3935vendor-advisory
1039142vdb-entry
https://www.postgresql.org/about/news/1772/
100276vdb-entry
GLSA-201710-06vendor-advisory
RHSA-2017:2677vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.