CVE-2017-7546
Description
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
31.12
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update PostgressSQL to 9.2.22 | Windows |
| Update PostgressSQL to 9.3.18 | Windows |
| Update PostgressSQL to 9.4.13 | Windows |
| Vulnerabilities CVE-2017-7548,CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.6.4 | Windows |
| Vulnerabilities CVE-2017-7548,CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.5.8 | Windows |
| Vulnerabilities CVE-2017-7548,CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.4.13 | Windows |
| Vulnerabilities CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.3.18 | Windows |
| Vulnerabilities CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.2.22 | Windows |
| object-relational SQL database (USN-3390-1) postgresql-9.3_9.3.18-0ubuntu0.14.04.1_i386.deb | Linux |
| object-relational SQL database (USN-3390-1) postgresql-9.3_9.3.18-0ubuntu0.14.04.1_amd64.deb | Linux |
| object-relational SQL database (USN-3390-1) postgresql-9.5_9.5.8-0ubuntu0.16.04.1_i386.deb | Linux |
| object-relational SQL database (USN-3390-1) postgresql-9.5_9.5.8-0ubuntu0.16.04.1_amd64.deb | Linux |
| object-relational SQL database (USN-3390-1) postgresql-9.6_9.6.4-0ubuntu0.17.04.1_i386.deb | Linux |
| object-relational SQL database (USN-3390-1) postgresql-9.6_9.6.4-0ubuntu0.17.04.1_amd64.deb | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-docs-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-docs-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-libs-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-libs-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-test-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-test-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-devel-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-devel-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-pltcl-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-pltcl-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-plperl-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-plperl-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-server-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-server-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-contrib-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-contrib-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-plpython-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql security update (CESA-2017:2860) postgresql-plpython-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-contrib-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-contrib-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-devel-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-devel-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-docs-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-docs-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-libs-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-libs-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-plperl-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-plperl-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-plpython-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-plpython-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-pltcl-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-pltcl-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-server-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-server-8.4.20-8.el6_9.x86_64.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-test-8.4.20-8.el6_9.i686.rpm | Linux |
| (RHSA-2017:2860) Moderate: postgresql security update postgresql-test-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql update (ELSA-2017-2860) postgresql-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-contrib update (ELSA-2017-2860) postgresql-contrib-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-devel update (ELSA-2017-2860) postgresql-devel-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-docs update (ELSA-2017-2860) postgresql-docs-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-libs update (ELSA-2017-2860) postgresql-libs-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-plperl update (ELSA-2017-2860) postgresql-plperl-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-plpython update (ELSA-2017-2860) postgresql-plpython-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-pltcl update (ELSA-2017-2860) postgresql-pltcl-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-server update (ELSA-2017-2860) postgresql-server-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql-test update (ELSA-2017-2860) postgresql-test-8.4.20-8.el6_9.x86_64.rpm | Linux |
| Postgresql update (ELSA-2017-2860) postgresql-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-contrib update (ELSA-2017-2860) postgresql-contrib-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-devel update (ELSA-2017-2860) postgresql-devel-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-docs update (ELSA-2017-2860) postgresql-docs-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-libs update (ELSA-2017-2860) postgresql-libs-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-plperl update (ELSA-2017-2860) postgresql-plperl-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-plpython update (ELSA-2017-2860) postgresql-plpython-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-pltcl update (ELSA-2017-2860) postgresql-pltcl-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-server update (ELSA-2017-2860) postgresql-server-8.4.20-8.el6_9.i686.rpm | Linux |
| Postgresql-test update (ELSA-2017-2860) postgresql-test-8.4.20-8.el6_9.i686.rpm | Linux |
| Update PostgressSQL to 9.2.22 (For Linux) | Linux |
| Update PostgressSQL to 9.3.18 (For Linux) | Linux |
| Update PostgressSQL to 9.4.13 (For Linux) | Linux |
| Vulnerabilities CVE-2017-7548,CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.6.4 (For Linux) | Linux |
| Vulnerabilities CVE-2017-7548,CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.5.8 (For Linux) | Linux |
| Vulnerabilities CVE-2017-7548,CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.4.13 (For Linux) | Linux |
| Vulnerabilities CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.3.18 (For Linux) | Linux |
| Vulnerabilities CVE-2017-7547,CVE-2017-7546 are fixed in PostgreSQL 9.2.22 (For Linux) | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234