CVE-2010-1169: PostgreSQL

High severity, CVSS 8.5. EPSS: 4.1% chance of exploitation in the next 30 days.

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.

Affected products

• PostgreSQL PostgreSQL: version 7.4 only; version 7.4.1 only; version 7.4.2 only; version 7.4.3 only; version 7.4.4 only; version 7.4.5 only; …

Published 2010-05-19. Last modified 2026-06-16.