AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-4136

MEDIUM · CVSS 6.5 EPSS 3.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-12-15 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.

CVE
CVE-2009-4136
Severity
MEDIUM
CVSS
6.5
EPSS
3.64%

Original NVD Description

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.