UpHeron
All vulnerabilities

Servers and applications

CVE-2009-3229

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.

Severity
Medium 4.0
Published
17 Sept 2009
Last changed
16 Jun 2026
Added to UpHeron
16 Oct 2026
Exploit chance
2.6% in the next 30 daysHigher than 85% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · Needs a login
Attacker can
Slow it down
CVSS vector
AV:N/AC:L/Au:S/C:N/I:N/A:P
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Version 8.4
  • Version 8.3.7
  • Version 8.3.6
  • Version 8.3.5
All 23 release lines
  • Version 8.2
  • Version 8.2.1
  • Version 8.2.2
  • Version 8.2.3
  • Version 8.2.4
  • Version 8.2.5
  • Version 8.2.6
  • Version 8.2.7
  • Version 8.2.8
  • Version 8.2.9
  • Version 8.2.10
  • Version 8.2.11
  • Version 8.2.12
  • Version 8.2.13
  • Version 8.3
  • Version 8.3.1
  • Version 8.3.2
  • Version 8.3.3
  • Version 8.3.4
  • Version 8.3.5
  • Version 8.3.6
  • Version 8.3.7
  • Version 8.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2009-3229
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2009-3229