UpHeron
All vulnerabilities

Servers and applications

CVE-2017-7546

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

Severity
Critical 9.8
Published
16 Aug 2017
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Version 9.6.3
  • Version 9.6.2
  • Version 9.6.1
  • Version 9.6
All 65 release lines
  • Version 9.2
  • Version 9.2.1
  • Version 9.2.2
  • Version 9.2.3
  • Version 9.2.4
  • Version 9.2.5
  • Version 9.2.6
  • Version 9.2.7
  • Version 9.2.8
  • Version 9.2.9
  • Version 9.2.10
  • Version 9.2.11
  • Version 9.2.12
  • Version 9.2.13
  • Version 9.2.14
  • Version 9.2.15
  • Version 9.2.16
  • Version 9.2.17
  • Version 9.2.18
  • Version 9.2.19
  • Version 9.2.20
  • Version 9.2.21
  • Version 9.3
  • Version 9.3.1
  • Version 9.3.2
  • Version 9.3.3
  • Version 9.3.4
  • Version 9.3.5
  • Version 9.3.6
  • Version 9.3.7
  • Version 9.3.8
  • Version 9.3.9
  • Version 9.3.10
  • Version 9.3.11
  • Version 9.3.12
  • Version 9.3.13
  • Version 9.3.14
  • Version 9.3.15
  • Version 9.3.16
  • Version 9.3.17
  • Version 9.4
  • Version 9.4.1
  • Version 9.4.2
  • Version 9.4.3
  • Version 9.4.4
  • Version 9.4.5
  • Version 9.4.6
  • Version 9.4.7
  • Version 9.4.8
  • Version 9.4.9
  • Version 9.4.10
  • Version 9.4.11
  • Version 9.4.12
  • Version 9.5
  • Version 9.5.1
  • Version 9.5.2
  • Version 9.5.3
  • Version 9.5.4
  • Version 9.5.5
  • Version 9.5.6
  • Version 9.5.7
  • Version 9.6
  • Version 9.6.1
  • Version 9.6.2
  • Version 9.6.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-7546
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-7546