CVE-2016-7048

Published: Aug 20, 2018Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote attackers to execute arbitrary code by leveraging use of HTTP to download software.

Affected (5)

Products: Postgresql: Postgresql

Postgresql

1 product

Postgresql

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Before 9.1.24
Postgresql Postgresql	From 9.2 to 9.2.19
Postgresql Postgresql	From 9.3 to 9.3.15
Postgresql Postgresql	From 9.4.0 to 9.4.10
Postgresql Postgresql	From 9.5.0 to 9.5.5