VDB

GCVE-VVD-MAGEIA-2017-230

GCVE-VVD-MAGEIA-2017-230
Advisory Published
Vulnetix · Advisory published July 30, 2017
Robert Haas discovered that some selectivity estimators did not validate user privileges which could result in information disclosure (CVE-2017-7484). Daniel Gustafsson discovered that the PGREQUIRESSL environment variable did no longer enforce a TLS connection (CVE-2017-7485). Andrew Wheelwright discovered that user mappings were insufficiently restricted (CVE-2017-7486).

Affected Products

VendorProductVersionsPlatforms
Mageiapostgresql9.30 (affected), 9.3.17-1.mga5 (unaffected)
Mageiapostgresql9.40 (affected), 9.4.12-1.mga5 (unaffected)

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›