CVE-2014-8161

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.

• CWE-209

• http://www.debian.org/security/2015/dsa-3155Third Party Advisory
• http://www.postgresql.org/about/news/1569/Vendor Advisory
• http://www.postgresql.org/docs/9.4/static/release-9-4-1.htmlRelease Notes, Vendor Advisory
• http://www.postgresql.org/docs/current/static/release-9-0-19.htmlRelease Notes, Vendor Advisory
• http://www.postgresql.org/docs/current/static/release-9-1-15.htmlRelease Notes, Vendor Advisory
• http://www.postgresql.org/docs/current/static/release-9-2-10.htmlRelease Notes, Vendor Advisory
• http://www.postgresql.org/docs/current/static/release-9-3-6.htmlRelease Notes, Vendor Advisory
• http://www.debian.org/security/2015/dsa-3155Third Party Advisory
• http://www.postgresql.org/about/news/1569/Vendor Advisory
• http://www.postgresql.org/docs/9.4/static/release-9-4-1.htmlRelease Notes, Vendor Advisory
• http://www.postgresql.org/docs/current/static/release-9-0-19.htmlRelease Notes, Vendor Advisory
• http://www.postgresql.org/docs/current/static/release-9-1-15.htmlRelease Notes, Vendor Advisory
• http://www.postgresql.org/docs/current/static/release-9-2-10.htmlRelease Notes, Vendor Advisory
• http://www.postgresql.org/docs/current/static/release-9-3-6.htmlRelease Notes, Vendor Advisory

Published

Jan 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8155GnuTLS before 2.9.10 does not verify the activation and expi…
• CVE-2014-8156The D-Bus security policy files in /etc/dbus-1/system.d/*.co…
• CVE-2014-8157Off-by-one error in the jpc_dec_process_sot function in JasP…
• CVE-2014-8158Multiple stack-based buffer overflows in jpc_qmfb.c in JasPe…
• CVE-2014-8159The InfiniBand (IB) implementation in the Linux kernel packa…
• CVE-2014-8160net/netfilter/nf_conntrack_proto_generic.c in the Linux kern…
• CVE-2014-8162XML external entity (XXE) in the RPC interface in Spacewalk …
• CVE-2014-8163Directory traversal vulnerability in the XMLRPC interface in…
• CVE-2014-8164A insecure configuration for certificate verification (http.…9.1
• CVE-2014-8165scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python …
• CVE-2014-8166The browsing feature in the server in CUPS does not filter A…8.8
• CVE-2014-8167vdsm and vdsclient does not validate certficate hostname fro…5.9