CVE-2017-7486

HIGH 7.5CVE-2017-7486 · Published 12/05/2017 · updated 17/06/2026

In short

CVE-2017-7486 is a HIGH (CVSS 7.5) vulnerability affecting postgresql (postgresql).
Chance of exploitation in the next 30 days (EPSS): 6.3%, higher than 93.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
postgresql postgresql	`= 8.4= 8.4.1= 8.4.10= 8.4.11= 8.4.12= 8.4.13= 8.4.14= 8.4.15= 8.4.16= 8.4.17= 8.4.18= 8.4.19= 8.4.2= 8.4.20= 8.4.21= 8.4.22= 8.4.3= 8.4.4= 8.4.5= 8.4.6= 8.4.7= 8.4.8= 8.4.9= 9.0= 9.0.1= 9.0.10= 9.0.11= 9.0.12= 9.0.13= 9.0.14= 9.0.15= 9.0.16= 9.0.17= 9.0.18= 9.0.19= 9.0.2= 9.0.20= 9.0.21= 9.0.22= 9.0.23= 9.0.3= 9.0.4= 9.0.5= 9.0.6= 9.0.7= 9.0.8= 9.0.9= 9.1= 9.1.1= 9.1.10= 9.1.11= 9.1.12= 9.1.13= 9.1.14= 9.1.15= 9.1.16= 9.1.17= 9.1.18= 9.1.19= 9.1.2= 9.1.20= 9.1.21= 9.1.22= 9.1.23= 9.1.24= 9.1.3= 9.1.4= 9.1.5= 9.1.6= 9.1.7= 9.1.8= 9.1.9= 9.2= 9.2.1= 9.2.10= 9.2.11= 9.2.12= 9.2.13= 9.2.14= 9.2.15= 9.2.16= 9.2.17= 9.2.18= 9.2.19= 9.2.2= 9.2.20= 9.2.21= 9.2.3= 9.2.4= 9.2.5= 9.2.6= 9.2.7= 9.2.8= 9.2.9= 9.3= 9.3.1= 9.3.10= 9.3.11= 9.3.12= 9.3.13= 9.3.14= 9.3.15= 9.3.16= 9.3.17= 9.3.2= 9.3.3= 9.3.4= 9.3.5= 9.3.6= 9.3.7= 9.3.8= 9.3.9= 9.4= 9.4.1= 9.4.10= 9.4.11= 9.4.12= 9.4.2= 9.4.3= 9.4.4= 9.4.5= 9.4.6= 9.4.7= 9.4.8= 9.4.9= 9.5= 9.5.1= 9.5.2= 9.5.3= 9.5.4= 9.5.5= 9.5.6= 9.5.7= 9.6`	No fix yet

Description

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

References

More vulnerabilities in postgresql

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

postgresql

= 8.4= 8.4.1= 8.4.10= 8.4.11= 8.4.12= 8.4.13= 8.4.14= 8.4.15= 8.4.16= 8.4.17= 8.4.18= 8.4.19= 8.4.2= 8.4.20= 8.4.21= 8.4.22= 8.4.3= 8.4.4= 8.4.5= 8.4.6= 8.4.7= 8.4.8= 8.4.9= 9.0= 9.0.1= 9.0.10= 9.0.11= 9.0.12= 9.0.13= 9.0.14= 9.0.15= 9.0.16= 9.0.17= 9.0.18= 9.0.19= 9.0.2= 9.0.20= 9.0.21= 9.0.22= 9.0.23= 9.0.3= 9.0.4= 9.0.5= 9.0.6= 9.0.7= 9.0.8= 9.0.9= 9.1= 9.1.1= 9.1.10= 9.1.11= 9.1.12= 9.1.13= 9.1.14= 9.1.15= 9.1.16= 9.1.17= 9.1.18= 9.1.19= 9.1.2= 9.1.20= 9.1.21= 9.1.22= 9.1.23= 9.1.24= 9.1.3= 9.1.4= 9.1.5= 9.1.6= 9.1.7= 9.1.8= 9.1.9= 9.2= 9.2.1= 9.2.10= 9.2.11= 9.2.12= 9.2.13= 9.2.14= 9.2.15= 9.2.16= 9.2.17= 9.2.18= 9.2.19= 9.2.2= 9.2.20= 9.2.21= 9.2.3= 9.2.4= 9.2.5= 9.2.6= 9.2.7= 9.2.8= 9.2.9= 9.3= 9.3.1= 9.3.10= 9.3.11= 9.3.12= 9.3.13= 9.3.14= 9.3.15= 9.3.16= 9.3.17= 9.3.2= 9.3.3= 9.3.4= 9.3.5= 9.3.6= 9.3.7= 9.3.8= 9.3.9= 9.4= 9.4.1= 9.4.10= 9.4.11= 9.4.12= 9.4.2= 9.4.3= 9.4.4= 9.4.5= 9.4.6= 9.4.7= 9.4.8= 9.4.9= 9.5= 9.5.1= 9.5.2= 9.5.3= 9.5.4= 9.5.5= 9.5.6= 9.5.7= 9.6

No fix yet