CVE-2014-8161 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-8161 Interim 1 25 2023-12-08T02:22:21Z current 2021-05-30T13:23:55Z 2023-12-08T02:22:21Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-8161 PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-March/001280.html E-Mail link for SUSE-SU-2015:0478-1 https://lists.suse.com/pipermail/sle-security-updates/2015-March/001321.html E-Mail link for SUSE-SU-2015:0639-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Manager 2.1 openSUSE Tumbleweed libecpg6-9.1.15-0.3.1 libecpg6-9.3.6-5.1 libpq5-32bit-9.1.15-0.3.1 libpq5-32bit-9.3.6-5.1 libpq5-9.1.15-0.3.1 libpq5-9.3.6-5.1 postgresql-9.2.10-2.el7_1 postgresql-contrib-9.2.10-2.el7_1 postgresql-devel-9.2.10-2.el7_1 postgresql-docs-9.2.10-2.el7_1 postgresql-libs-9.2.10-2.el7_1 postgresql-plperl-9.2.10-2.el7_1 postgresql-plpython-9.2.10-2.el7_1 postgresql-pltcl-9.2.10-2.el7_1 postgresql-server-9.2.10-2.el7_1 postgresql-test-9.2.10-2.el7_1 postgresql-upgrade-9.2.10-2.el7_1 postgresql91-9.1.15-0.3.1 postgresql91-contrib-9.1.15-0.3.1 postgresql91-devel-9.1.15-0.3.1 postgresql91-docs-9.1.15-0.3.1 postgresql91-pltcl-9.1.15-0.3.1 postgresql91-server-9.1.15-0.3.1 postgresql93-9.3.15-1.1 postgresql93-9.3.6-5.2 postgresql93-contrib-9.3.15-1.1 postgresql93-contrib-9.3.6-5.2 postgresql93-devel-9.3.15-1.1 postgresql93-devel-9.3.6-5.1 postgresql93-docs-9.3.15-1.1 postgresql93-docs-9.3.6-5.2 postgresql93-plperl-9.3.15-1.1 postgresql93-plpython-9.3.15-1.1 postgresql93-pltcl-9.3.15-1.1 postgresql93-server-9.3.15-1.1 postgresql93-server-9.3.6-5.2 postgresql93-test-9.3.15-1.1 postgresql-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-contrib-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-devel-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-docs-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-libs-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-plperl-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-plpython-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-pltcl-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-server-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-test-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-upgrade-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libecpg6-9.3.6-5.1 as a component of SUSE Linux Enterprise Desktop 12 libpq5-9.3.6-5.1 as a component of SUSE Linux Enterprise Desktop 12 libpq5-32bit-9.3.6-5.1 as a component of SUSE Linux Enterprise Desktop 12 postgresql93-9.3.6-5.2 as a component of SUSE Linux Enterprise Desktop 12 libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql91-contrib-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql91-server-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-contrib-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-server-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql91-contrib-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql91-server-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libecpg6-9.3.6-5.1 as a component of SUSE Linux Enterprise Server 12 libpq5-9.3.6-5.1 as a component of SUSE Linux Enterprise Server 12 libpq5-32bit-9.3.6-5.1 as a component of SUSE Linux Enterprise Server 12 postgresql93-9.3.6-5.2 as a component of SUSE Linux Enterprise Server 12 postgresql93-contrib-9.3.6-5.2 as a component of SUSE Linux Enterprise Server 12 postgresql93-docs-9.3.6-5.2 as a component of SUSE Linux Enterprise Server 12 postgresql93-server-9.3.6-5.2 as a component of SUSE Linux Enterprise Server 12 libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 postgresql91-contrib-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 postgresql91-server-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libecpg6-9.3.6-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libpq5-9.3.6-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libpq5-32bit-9.3.6-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql93-9.3.6-5.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql93-contrib-9.3.6-5.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql93-docs-9.3.6-5.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql93-server-9.3.6-5.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql91-devel-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 postgresql93-devel-9.3.6-5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 postgresql91-pltcl-9.1.15-0.3.1 as a component of SUSE Manager 2.1 postgresql93-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-contrib-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-devel-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-docs-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-plperl-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-plpython-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-pltcl-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-server-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-test-9.3.15-1.1 as a component of openSUSE Tumbleweed PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message. CVE-2014-8161 SUSE Liberty Linux 7:postgresql-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-contrib-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-devel-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-docs-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-libs-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-plperl-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-plpython-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-pltcl-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-server-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-test-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-upgrade-9.2.10-2.el7_1 SUSE Linux Enterprise Desktop 11 SP3:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 12:libecpg6-9.3.6-5.1 SUSE Linux Enterprise Desktop 12:libpq5-9.3.6-5.1 SUSE Linux Enterprise Desktop 12:libpq5-32bit-9.3.6-5.1 SUSE Linux Enterprise Desktop 12:postgresql93-9.3.6-5.2 SUSE Linux Enterprise Server 11 SP1-TERADATA:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql91-contrib-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql91-server-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-contrib-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-server-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql91-contrib-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql91-server-9.1.15-0.3.1 SUSE Linux Enterprise Server 12:libecpg6-9.3.6-5.1 SUSE Linux Enterprise Server 12:libpq5-9.3.6-5.1 SUSE Linux Enterprise Server 12:libpq5-32bit-9.3.6-5.1 SUSE Linux Enterprise Server 12:postgresql93-9.3.6-5.2 SUSE Linux Enterprise Server 12:postgresql93-contrib-9.3.6-5.2 SUSE Linux Enterprise Server 12:postgresql93-docs-9.3.6-5.2 SUSE Linux Enterprise Server 12:postgresql93-server-9.3.6-5.2 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:postgresql91-contrib-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:postgresql91-server-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 12:libecpg6-9.3.6-5.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-9.3.6-5.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-32bit-9.3.6-5.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql93-9.3.6-5.2 SUSE Linux Enterprise Server for SAP Applications 12:postgresql93-contrib-9.3.6-5.2 SUSE Linux Enterprise Server for SAP Applications 12:postgresql93-docs-9.3.6-5.2 SUSE Linux Enterprise Server for SAP Applications 12:postgresql93-server-9.3.6-5.2 SUSE Linux Enterprise Software Development Kit 11 SP3:postgresql91-devel-9.1.15-0.3.1 SUSE Linux Enterprise Software Development Kit 12:postgresql93-devel-9.3.6-5.1 SUSE Manager 2.1:postgresql91-pltcl-9.1.15-0.3.1 openSUSE Tumbleweed:postgresql93-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-contrib-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-devel-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-docs-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-plperl-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-plpython-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-pltcl-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-server-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-test-9.3.15-1.1 moderate 4 AV:N/AC:L/Au:S/C:P/I:N/A:N 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N