Description

The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote attackers to execute arbitrary code by leveraging use of HTTP to download software.

Remediation

References

CVE-2016-7048

Related Vulnerabilities

MySQL Other Vulnerability (CVE-2004-2149)

Contao Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-28191)

WordPress Plugin Browser and Operating System Finder Cross-Site Request Forgery (1.1)

WordPress Plugin Timeline Calendar SQL Injection (1.2)

Oracle HTTP Server Use After Free Vulnerability (CVE-2019-0211)

Severity

High

Classification

CVE-2016-7048 CWE-284 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities