| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 9.0= 9.0.1= 9.0.10= 9.0.11= 9.0.12= 9.0.2= 9.0.3= 9.0.4= 9.0.5= 9.0.6= 9.0.7= 9.0.8= 9.0.9= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.1.4= 9.1.5= 9.1.6= 9.1.7= 9.1.8= 9.2= 9.2.1= 9.2.2= 9.2.3 |
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free