{"schemaVersion":3,"id":"CVE-2024-10978","aliases":["ALPINE-CVE-2024-10978","UBUNTU-CVE-2024-10978","DEBIAN-CVE-2024-10978","CGA-3fx6-68r4-jw76","CGA-5wg5-66f3-4533","CGA-66ch-vph2-f9hq","CGA-6c5v-c2x3-p69w","CGA-c75q-4966-mrpj","CGA-cqxr-4fwm-jgv3","CGA-fw52-5mgx-9r2p","CGA-gcj6-w472-mqm6","CGA-gv3w-54r3-7354","CGA-hgrc-v6rh-q8rj","CGA-hp59-8c5j-q77p","CGA-jfgc-c498-q2q5","CGA-mc38-fhv5-7jpg","CGA-q8x2-fqwr-f8p9","CGA-w738-43fv-3f6c"],"status":"published","duplicateOf":null,"title":null,"description":"Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended.  An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature.  The problem arises when an application query uses parameters from the attacker or conveys query results to the attacker.  If that query reacts to current_setting('role') or the current user ID, it may modify or return data as though the session had not used SET ROLE or SET SESSION AUTHORIZATION.  The attacker does not control which incorrect user ID applies.  Query text from less-privileged sources is not a concern here, because SET ROLE and SET SESSION AUTHORIZATION are not sandboxes for unvetted queries.  Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.","dates":{"published":"2024-11-14T13:00:07.398Z","modified":"2025-11-03T21:51:39.867Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.2,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.2,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":4.2,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":4.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.2,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":4.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":4.2,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":4.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.2,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":4.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.2,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":4.1,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.2,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0069,"percentile":0.51911,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0069},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0069,"percentile":0.51911}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0069,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0069,"percentile":0.51911}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-266","name":"Incorrect Privilege Assignment","description":"A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/266.html"}],"affected":[{"vendor":"alpine","product":"postgresql14","name":"postgresql14","label":"postgresql14","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql15","name":"postgresql15","label":"postgresql15","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql16","name":"postgresql16","label":"postgresql16","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql17","name":"postgresql17","label":"postgresql17","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-12","purlType":"apk","versions":[{"text":"< 12.21-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.21-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-13","name":"postgresql-13","label":"postgresql-13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-13","purlType":"apk","versions":[{"text":"< 13.17-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.17-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-14-client","name":"postgresql-14-client","label":"postgresql-14-client","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-14-client","purlType":"apk","versions":[{"text":"< 14.24-r2","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 14.24-r2 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-15-client","name":"postgresql-15-client","label":"postgresql-15-client","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-15-client","purlType":"apk","versions":[{"text":"< 15.19-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.19-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/postgresql-17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-12","purlType":"apk","versions":[{"text":"< 12.21-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.21-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-13","name":"postgresql-13","label":"postgresql-13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-13","purlType":"apk","versions":[{"text":"< 13.17-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.17-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-14","purlType":"apk","versions":[{"text":"< 14.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.14-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-14-client","name":"postgresql-14-client","label":"postgresql-14-client","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-14-client","purlType":"apk","versions":[{"text":"< 14.24-r2","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 14.24-r2 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-15","purlType":"apk","versions":[{"text":"< 15.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-15-client","name":"postgresql-15-client","label":"postgresql-15-client","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-15-client","purlType":"apk","versions":[{"text":"< 15.19-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.19-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-16","purlType":"apk","versions":[{"text":"< 16.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.5-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/postgresql-17","purlType":"apk","versions":[{"text":"< 17.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"postgresql-15","name":"postgresql-15","label":"postgresql-15","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/postgresql-15","purlType":"deb","versions":[{"text":"< 15.9-0+deb12u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.9-0+deb12u1","eol":null,"hubHref":null},{"vendor":"debian","product":"postgresql-17","name":"postgresql-17","label":"postgresql-17","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/postgresql-17","purlType":"deb","versions":[{"text":"< 17.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-10","name":"postgresql-10","label":"postgresql-10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-10","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-12","name":"postgresql-12","label":"postgresql-12","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-12","purlType":"deb","versions":[{"text":"< 12.22-0ubuntu0.20.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.22-0ubuntu0.20.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-14","name":"postgresql-14","label":"postgresql-14","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-14","purlType":"deb","versions":[{"text":"< 14.15-0ubuntu0.22.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.15-0ubuntu0.22.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-16","name":"postgresql-16","label":"postgresql-16","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-16","purlType":"deb","versions":[{"text":"< 16.6-0ubuntu0.24.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.6-0ubuntu0.24.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.3","name":"postgresql-9.3","label":"postgresql-9.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.5","name":"postgresql-9.5","label":"postgresql-9.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.5","purlType":"deb","versions":[{"text":"< 9.5.25-0ubuntu0.16.04.1+esm10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.25-0ubuntu0.16.04.1+esm10","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.0","eol":{"isEol":true,"eolDate":"2026-08-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11","label":"11 (Bullseye)","eolFrom":"2026-08-31T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"11.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"postgresql","product":"postgresql","name":"postgresql","label":"postgresql","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 12.0, < 12.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 13.0, < 13.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 14.0, < 14.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 15.0, < 15.9","noFixRecorded":false,"fixedIn":null},{"text":"≥ 16.0, < 16.5","noFixRecorded":false,"fixedIn":null},{"text":"17.0","noFixRecorded":false,"fixedIn":null},{"text":"17.0:beta1","noFixRecorded":false,"fixedIn":null},{"text":"17.0:beta2","noFixRecorded":false,"fixedIn":null},{"text":"17.0:beta3","noFixRecorded":false,"fixedIn":null},{"text":"17.0:rc1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 12.0, < 12.21 | ≥ 13.0, < 13.17 | ≥ 14.0, < 14.14 | ≥ 15.0, < 15.9 | ≥ 16.0, < 16.5 | 17.0 | 17.0:beta1 | 17.0:beta2 | 17.0:beta3 | 17.0:rc1","eol":{"isEol":false,"eolDate":"2029-11-08T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"17","label":"17","eolFrom":"2029-11-08T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"17.11"},"product":{"name":"postgresql","label":"PostgreSQL","category":"database"}},"hubHref":"/vendor/postgresql/postgresql"}],"affectedCount":30,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://www.postgresql.org/support/security/CVE-2024-10978/","label":"www.postgresql.org/support/security/CVE-2024-10978/","hostname":"www.postgresql.org","tags":["REPORT","Advisory","Vendor Advisory"]},{"url":"https://www.postgresql.org/message-id/173171334532.1547978.1518068370217143844%40wrigleys.postgresql.org","label":"www.postgresql.org/message-id/173171334532.1547978.1518068370217143844%40wrigleys.postgresql.org","hostname":"www.postgresql.org","tags":["ARTICLE","Mailing List"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00018.html","label":"lists.debian.org/debian-lts-announce/2024/11/msg00018.html","hostname":"lists.debian.org","tags":["ARTICLE","Mailing List"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00011.html","label":"lists.debian.org/debian-lts-announce/2024/11/msg00011.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-10978","label":"security.alpinelinux.org/vuln/CVE-2024-10978","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-10978","label":"ubuntu.com/security/CVE-2024-10978","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-10978","label":"www.cve.org/CVERecord?id=CVE-2024-10978","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7132-1","label":"ubuntu.com/security/notices/USN-7132-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7358-1","label":"ubuntu.com/security/notices/USN-7358-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-10978","label":"security-tracker.debian.org/tracker/CVE-2024-10978","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10978","label":"nvd.nist.gov/vuln/detail/CVE-2024-10978","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-3954-1","DSA-5812-1","MGASA-2024-0372","OPENSUSE-SU-2024:14501-1","OPENSUSE-SU-2024:14502-1","OPENSUSE-SU-2024:14503-1","OPENSUSE-SU-2024:14504-1","OPENSUSE-SU-2024:14505-1","OPENSUSE-SU-2024:14506-1","RHSA-2024:10785","RHSA-2024:10787","RHSA-2024:10788","RHSA-2024:10791","RHSA-2024:10830","RHSA-2024:10831","RHSA-2024:10832","SUSE-SU-2024:4063-1","SUSE-SU-2024:4095-1","SUSE-SU-2024:4096-1","SUSE-SU-2024:4097-1","SUSE-SU-2024:4098-1","SUSE-SU-2024:4099-1","SUSE-SU-2024:4114-1","SUSE-SU-2024:4118-1","SUSE-SU-2024:4173-1","SUSE-SU-2024:4174-1","SUSE-SU-2024:4175-1","SUSE-SU-2024:4176-1","SUSE-SU-2025:01799-1","USN-7132-1","USN-7358-1"],"duplicates":[],"related":["CGA-395C-68M4-6MQC","CGA-9PFX-7C5P-9WR7","CGA-P7HV-7JRR-6MH7","CGA-QJMV-HPP7-CV7V","CGA-RJP2-QG6W-C3WG","CGA-VQ2H-7XFW-9968","OPENSUSE-SU-2024:14501-1","OPENSUSE-SU-2024:14502-1","OPENSUSE-SU-2024:14503-1","OPENSUSE-SU-2024:14504-1","OPENSUSE-SU-2024:14505-1","OPENSUSE-SU-2024:14506-1","SUSE-SU-2024:4063-1","SUSE-SU-2024:4095-1","SUSE-SU-2024:4096-1","SUSE-SU-2024:4097-1","SUSE-SU-2024:4098-1","SUSE-SU-2024:4099-1","SUSE-SU-2024:4114-1","SUSE-SU-2024:4118-1","SUSE-SU-2024:4173-1","SUSE-SU-2024:4174-1","SUSE-SU-2024:4175-1","SUSE-SU-2024:4176-1","SUSE-SU-2025:01799-1","USN-7132-1","USN-7358-1"]},"timeline":[{"kind":"published","date":"2024-11-14T13:00:07.398Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T21:51:39.867Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":17,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T03:40:12.252Z","stale":false,"partial":false}}