UpHeron
All vulnerabilities

Servers and applications

CVE-2017-12172

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many…

Severity
Medium 6.7
Published
22 Nov 2017
Last changed
15 Oct 2026
Added to UpHeron
16 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Version 10
  • Version 9.6.5
  • Version 9.6.4
  • Version 9.6.3
All 76 release lines
  • Version 9.2
  • Version 9.2.1
  • Version 9.2.2
  • Version 9.2.3
  • Version 9.2.4
  • Version 9.2.5
  • Version 9.2.6
  • Version 9.2.7
  • Version 9.2.8
  • Version 9.2.9
  • Version 9.2.10
  • Version 9.2.11
  • Version 9.2.12
  • Version 9.2.13
  • Version 9.2.14
  • Version 9.2.15
  • Version 9.2.16
  • Version 9.2.17
  • Version 9.2.18
  • Version 9.2.19
  • Version 9.2.20
  • Version 9.2.21
  • Version 9.2.22
  • Version 9.2.23
  • Version 9.3
  • Version 9.3.1
  • Version 9.3.2
  • Version 9.3.3
  • Version 9.3.4
  • Version 9.3.5
  • Version 9.3.6
  • Version 9.3.7
  • Version 9.3.8
  • Version 9.3.9
  • Version 9.3.10
  • Version 9.3.11
  • Version 9.3.12
  • Version 9.3.13
  • Version 9.3.14
  • Version 9.3.15
  • Version 9.3.16
  • Version 9.3.17
  • Version 9.3.18
  • Version 9.3.19
  • Version 9.4
  • Version 9.4.1
  • Version 9.4.2
  • Version 9.4.3
  • Version 9.4.4
  • Version 9.4.5
  • Version 9.4.6
  • Version 9.4.7
  • Version 9.4.8
  • Version 9.4.9
  • Version 9.4.10
  • Version 9.4.11
  • Version 9.4.12
  • Version 9.4.13
  • Version 9.4.14
  • Version 9.5
  • Version 9.5.1
  • Version 9.5.2
  • Version 9.5.3
  • Version 9.5.4
  • Version 9.5.5
  • Version 9.5.6
  • Version 9.5.7
  • Version 9.5.8
  • Version 9.5.9
  • Version 9.6
  • Version 9.6.1
  • Version 9.6.2
  • Version 9.6.3
  • Version 9.6.4
  • Version 9.6.5
  • Version 10

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-12172
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-12172