postgresql-9.6 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the postgresql-9.6 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Incomplete Cleanup	*
M Insufficiently Protected Credentials	<9.6.24-0+deb9u1
H SQL Injection	<9.6.24-0+deb9u1
M Information Exposure	<9.6.22-0+deb9u1
H Out-of-Bounds	<9.6.22-0+deb9u1
H Permissive Whitelist	<9.6.20-0+deb9u1
H Use of a Broken or Risky Cryptographic Algorithm	<9.6.20-0+deb9u1
H SQL Injection	<9.6.20-0+deb9u1
H Untrusted Search Path	<9.6.19-0+deb9u1
M Missing Authorization	<9.6.17-0+deb9u1
H SQL Injection	<9.6.15-0+deb9u1
M Improper Access Control	<9.6.13-0+deb9u1
L OS Command Injection	*
H Incorrect Authorization	<9.6.10-0+deb9u1
H SQL Injection	<9.6.10-0+deb9u1
C Incorrect Permission Assignment for Critical Resource	<9.6.9-0+deb9u1
H CVE-2018-1058	<9.6.8-0+deb9u1
H Incorrect Permission Assignment for Critical Resource	<9.6.7-0+deb9u1
M Link Following	<9.6.6-0+deb9u1
M Information Exposure	<9.6.6-0+deb9u1
H Information Exposure	<9.6.6-0+deb9u1
H CVE-2017-7548	<9.6.4-0+deb9u1
H CVE-2017-7547	<9.6.4-0+deb9u1
C Improper Authentication	<9.6.4-0+deb9u1
M Missing Encryption of Sensitive Data	<9.6.3-1
H Information Exposure	<9.6.3-1
H Information Exposure	<9.6.3-1