CVE-2019-10208
HighAdvisory
Published 8 Aug 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.022
- 81st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 35
- of 17,781 indexed, latest versions
- Container images
- 33
- deployed by those charts
- Fix available
- 5 of 6
- affected packages
postgresql-9.4 - security update
Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 33 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| postgresqlapk | 11.2-r0, 11.3-r0, 11.4-r0 | 11.5-r0 | 3 |
| postgresql-10deb | 10.6-0ubuntu0.18.04.1, 10.8-0ubuntu0.18.04.1 | 10.10-0ubuntu0.18.04.1 | 3 |
| postgresql-9.5deb | 9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.04 | 9.5.19-0ubuntu0.16.04.1 | 3 |
| postgresql-9.3deb | 9.3.22-0ubuntu0.14.04 | no fix listed | 1 |
| postgresql-9.6deb | 9.6.6-0+deb9u1, 9.6.7-0+deb9u1, 9.6.10-0+deb9u1, 9.6.11-0+deb9u1+3 more | 9.6.15-0+deb9u1 | 13 |
| postgresql-9.4deb | 9.4.13-0+deb8u1, 9.4.15-0+deb8u1, 9.4.18-0+deb8u1 | 9.4.24-0+deb8u1 | 10 |
- OSV records
- ALPINE-CVE-2019-10208UBUNTU-CVE-2019-10208DLA-1874-1DSA-4492-1
- Also known as
- USN-4090-1
Charts affected
35 by stars
Container images carrying it
33 by charts deploying them
A fixed version is listed for 5 of the 6 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| nachomillangarcia/ | e4ce056f2d6d | postgresql-9.6 | 9.6.15-0+deb9u1 | 2 |
| neilpeterson/ | 84062718347c | postgresql-9.6 | 9.6.15-0+deb9u1 | 2 |
| omecproject/ | cfdb566dd949 | postgresql-9.5 | 9.5.19-0ubuntu0.16.04.1 | 2 |
| osixia/ | d212a12aa728 | postgresql-9.6 | 9.6.15-0+deb9u1 | 2 |
| statsd/ | dab129e74c25 | postgresql-9.6 | 9.6.15-0+deb9u1 | 2 |
| amancevice/ | c8c04bfe3d66 | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| billimek/ | 801bba1228ac | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| bryanalves/ | 95f73dce8b21 | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| bryanalves/ | af47dfbb9413 | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| chorss/ | 5c549cacb8ab | postgresql | 11.5-r0 | 1 |
| dpage/ | a5a656e1d5fd | postgresql | 11.5-r0 | 1 |
| fiware/ | 3e3ec88d59ed | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| galaxy/ | 8e577a626dfd | postgresql-9.3 | no fix listed | 1 |
| halkeye/ | 77b05e95fdb5 | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| hickey/ | c1148a09ef20 | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| ibmcom/ | 9a766604a73b | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| neilpeterson/ | fb47732ef36b | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| neilpeterson/ | 64fd8dab075f | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| neilpeterson/ | 8b645ac1a23e | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| neilpeterson/ | 6527b05d5d03 | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| neilpeterson/ | f4940e84ed05 | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| neilpeterson/ | 5859d68a6c9f | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| neilpeterson/ | 29d229ab446e | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| neilpeterson/ | 969af3cb8466 | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| neilpeterson/ | 39ce9f92e899 | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| nodered/ | 070643219ea2 | postgresql-9.6 | 9.6.15-0+deb9u1 | 1 |
| omecproject/ | d109a8e57e71 | postgresql-9.5 | 9.5.19-0ubuntu0.16.04.1 | 1 |
| opendatacube/ | 5d810e8504b8 | postgresql-10 | 10.10-0ubuntu0.18.04.1 | 1 |
| opendatacube/ | 91870111837c | postgresql-10 | 10.10-0ubuntu0.18.04.1 | 1 |
| opendatacube/ | 1b90cdf68831 | postgresql-10 | 10.10-0ubuntu0.18.04.1 | 1 |
| pactfoundation/ | 062d6c710099 | postgresql | 11.5-r0 | 1 |
| stakater/ | 4f8e409f30c2 | postgresql-9.4 | 9.4.24-0+deb8u1 | 1 |
| tpdock/ | 3da600c95a49 | postgresql-9.5 | 9.5.19-0ubuntu0.16.04.1 | 1 |