CVE-2017-7546

Published: Aug 16, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

Affected (66)

Products: Postgresql: Postgresql · Debian: Debian Linux

1 product

1 product

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 9.2.10
Postgresql Postgresql	Version 9.2.11
Postgresql Postgresql	Version 9.2.12
Postgresql Postgresql	Version 9.2.13
Postgresql Postgresql	Version 9.2.14
Postgresql Postgresql	Version 9.2.15
Postgresql Postgresql	Version 9.2.16
Postgresql Postgresql	Version 9.2.17
Postgresql Postgresql	Version 9.2.18
Postgresql Postgresql	Version 9.2.19
Postgresql Postgresql	Version 9.2.1
Postgresql Postgresql	Version 9.2.20
Postgresql Postgresql	Version 9.2.21
Postgresql Postgresql	Version 9.2.2
Postgresql Postgresql	Version 9.2.3
Postgresql Postgresql	Version 9.2.4
Postgresql Postgresql	Version 9.2.5
Postgresql Postgresql	Version 9.2.6
Postgresql Postgresql	Version 9.2.7
Postgresql Postgresql	Version 9.2.8
Postgresql Postgresql	Version 9.2.9
Postgresql Postgresql	Version 9.2

Configuration B

18 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 9.3.10
Postgresql Postgresql	Version 9.3.11
Postgresql Postgresql	Version 9.3.12
Postgresql Postgresql	Version 9.3.13
Postgresql Postgresql	Version 9.3.14
Postgresql Postgresql	Version 9.3.15
Postgresql Postgresql	Version 9.3.16
Postgresql Postgresql	Version 9.3.17
Postgresql Postgresql	Version 9.3.1
Postgresql Postgresql	Version 9.3.2
Postgresql Postgresql	Version 9.3.3
Postgresql Postgresql	Version 9.3.4
Postgresql Postgresql	Version 9.3.5
Postgresql Postgresql	Version 9.3.6
Postgresql Postgresql	Version 9.3.7
Postgresql Postgresql	Version 9.3.8
Postgresql Postgresql	Version 9.3.9
Postgresql Postgresql	Version 9.3

Configuration C

13 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 9.4.10
Postgresql Postgresql	Version 9.4.11
Postgresql Postgresql	Version 9.4.12
Postgresql Postgresql	Version 9.4.1
Postgresql Postgresql	Version 9.4.2
Postgresql Postgresql	Version 9.4.3
Postgresql Postgresql	Version 9.4.4
Postgresql Postgresql	Version 9.4.5
Postgresql Postgresql	Version 9.4.6
Postgresql Postgresql	Version 9.4.7
Postgresql Postgresql	Version 9.4.8
Postgresql Postgresql	Version 9.4.9
Postgresql Postgresql	Version 9.4

Configuration D

8 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 9.5.1
Postgresql Postgresql	Version 9.5.2
Postgresql Postgresql	Version 9.5.3
Postgresql Postgresql	Version 9.5.4
Postgresql Postgresql	Version 9.5.5
Postgresql Postgresql	Version 9.5.6
Postgresql Postgresql	Version 9.5.7
Postgresql Postgresql	Version 9.5