CVE-2017-7548: Debian Linux

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• PostgreSQL PostgreSQL: from 9.4, before 9.4.13 (fixed in 9.4.13); from 9.5, before 9.5.8 (fixed in 9.5.8); from 9.6, before 9.6.4 (fixed in 9.6.4)

Published 2017-08-16. Last modified 2026-06-17.