| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 9.2= 9.2.1= 9.2.10= 9.2.11= 9.2.12= 9.2.13= 9.2.14= 9.2.15= 9.2.16= 9.2.17= 9.2.2= 9.2.3= 9.2.4= 9.2.5= 9.2.6= 9.2.7= 9.2.8= 9.2.9= 9.3= 9.3.1= 9.3.10= 9.3.11= 9.3.12= 9.3.13= 9.3.2= 9.3.3= 9.3.4= 9.3.5= 9.3.6= 9.3.7= 9.3.8= 9.3.9= 9.4= 9.4.1= 9.4.2= 9.4.3= 9.4.4= 9.4.5= 9.4.6= 9.4.7= 9.4.8= 9.5= 9.5.1= 9.5.2= 9.5.3≤ 9.1.22 |
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free