CVEvulnerability
CVE-2013-1900
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-04-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."
Affected configurations
• postgresql postgresql 9.2
• postgresql postgresql 9.2.1
• postgresql postgresql 9.2.2
• postgresql postgresql 9.2.3
• postgresql postgresql 9.1
• postgresql postgresql 9.1.1
• postgresql postgresql 9.1.2
• postgresql postgresql 9.1.3
• postgresql postgresql 9.1.4
• postgresql postgresql 9.1.5
• postgresql postgresql 9.1.6
• postgresql postgresql 9.1.7
• postgresql postgresql 9.1.8
• postgresql postgresql 9.0
• postgresql postgresql 9.0.1
• postgresql postgresql 9.0.2
• postgresql postgresql 9.0.3
• postgresql postgresql 9.0.4
• postgresql postgresql 9.0.5
• postgresql postgresql 9.0.6
• postgresql postgresql 9.0.7
• postgresql postgresql 9.0.8
• postgresql postgresql 9.0.9
• postgresql postgresql 9.0.10
• postgresql postgresql 9.0.11
• postgresql postgresql 9.0.12
• postgresql postgresql 8.4
• postgresql postgresql 8.4.1
• postgresql postgresql 8.4.2
• postgresql postgresql 8.4.3
• postgresql postgresql 8.4.4
• postgresql postgresql 8.4.5
• postgresql postgresql 8.4.6
• postgresql postgresql 8.4.7
• postgresql postgresql 8.4.8
• postgresql postgresql 8.4.9
• postgresql postgresql 8.4.10
• postgresql postgresql 8.4.11
• postgresql postgresql 8.4.12
• postgresql postgresql 8.4.13
• postgresql postgresql 8.4.14
• postgresql postgresql 8.4.15
• postgresql postgresql 8.4.16
• canonical ubuntu linux 8.04
• canonical ubuntu linux 10.04
• canonical ubuntu linux 11.10
• canonical ubuntu linux 12.04
• canonical ubuntu linux 12.10
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html lists.apple.com
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2013-1475.html rhn.redhat.com
- http://support.apple.com/kb/HT5880 support.apple.com
- http://support.apple.com/kb/HT5892 support.apple.com
- http://www.debian.org/security/2013/dsa-2657 www.debian.org
- http://www.debian.org/security/2013/dsa-2658 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:142 www.mandriva.com
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html www.oracle.com
- http://www.postgresql.org/about/news/1456/ Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-8-4-17.html www.postgresql.org
- http://www.postgresql.org/docs/current/static/release-9-0-13.html www.postgresql.org
- http://www.postgresql.org/docs/current/static/release-9-1-9.html www.postgresql.org
- http://www.postgresql.org/docs/current/static/release-9-2-4.html www.postgresql.org
- http://www.ubuntu.com/usn/USN-1789-1 www.ubuntu.com
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html lists.apple.com
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2013-1475.html rhn.redhat.com
- http://support.apple.com/kb/HT5880 support.apple.com
- http://support.apple.com/kb/HT5892 support.apple.com
- http://www.debian.org/security/2013/dsa-2657 www.debian.org
- http://www.debian.org/security/2013/dsa-2658 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:142 www.mandriva.com
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html www.oracle.com
- http://www.postgresql.org/about/news/1456/ Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-8-4-17.html www.postgresql.org
- http://www.postgresql.org/docs/current/static/release-9-0-13.html www.postgresql.org
- http://www.postgresql.org/docs/current/static/release-9-1-9.html www.postgresql.org
- http://www.postgresql.org/docs/current/static/release-9-2-4.html www.postgresql.org
- http://www.ubuntu.com/usn/USN-1789-1 www.ubuntu.com