UpHeron
All vulnerabilities

Servers and applications

CVE-2014-0067

The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.

Severity
Medium 4.6
Published
31 Mar 2014
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Version 9.3.2
  • Version 9.3.1
  • Version 9.3
  • Version 9.2.6
All 57 release lines
  • Every version up to 8.4.19
  • Version 8.4.1
  • Version 8.4.2
  • Version 8.4.3
  • Version 8.4.4
  • Version 8.4.5
  • Version 8.4.6
  • Version 8.4.7
  • Version 8.4.8
  • Version 8.4.9
  • Version 8.4.10
  • Version 8.4.11
  • Version 8.4.12
  • Version 8.4.13
  • Version 8.4.14
  • Version 8.4.15
  • Version 8.4.16
  • Version 8.4.17
  • Version 8.4.18
  • Version 9.0
  • Version 9.0.1
  • Version 9.0.2
  • Version 9.0.3
  • Version 9.0.4
  • Version 9.0.5
  • Version 9.0.6
  • Version 9.0.7
  • Version 9.0.8
  • Version 9.0.9
  • Version 9.0.10
  • Version 9.0.11
  • Version 9.0.12
  • Version 9.0.13
  • Version 9.0.14
  • Version 9.0.15
  • Version 9.1
  • Version 9.1.1
  • Version 9.1.2
  • Version 9.1.3
  • Version 9.1.4
  • Version 9.1.5
  • Version 9.1.6
  • Version 9.1.7
  • Version 9.1.8
  • Version 9.1.9
  • Version 9.1.10
  • Version 9.1.11
  • Version 9.2
  • Version 9.2.1
  • Version 9.2.2
  • Version 9.2.3
  • Version 9.2.4
  • Version 9.2.5
  • Version 9.2.6
  • Version 9.3
  • Version 9.3.1
  • Version 9.3.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-0067
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-0067