CVE-2016-7048

Interactive installer downloads software over plain HTTP, then executes it

Version Information

Affected Version Fixed In Fix Published
9.5 9.5.5 2016-10-27
9.4 9.4.10 2016-10-27
9.3 9.3.15 2016-10-27
9.2 9.2.19 2016-10-27
9.1 9.1.24 2016-10-27

For more information about PostgreSQL versioning, please visit the versioning page.

CVSS 3.0

Overall Score 7.5
Component packaging
Vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Reporting Security Vulnerabilities

If you wish to report a new security vulnerability in PostgreSQL, please send an email to security@postgresql.org.

For reporting non-security bugs, please see the Report a Bug page.