CVE-2010-1169 [High] | Code Injection in Postgresql

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-06-15	0.95%	4.08%	+3.13%
2	2026-06-13	0.78%	0.95%	+0.17%
3	2026-04-12	—	0.78%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-06-15

0.95%

4.08%

+3.13%

2026-06-13

0.78%

0.95%

+0.17%

2026-04-12

—

0.78%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
8.5	2.0	HIGH	`AV:N/AC:M/Au:S/C:C/I:C/A:C` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:M) Exploitation needs some favorable conditions, but not exceptional ones. Authentication (AU:S) A single authentication is required. Confidentiality impact (C:C) Complete confidentiality impact. Integrity impact (I:C) Complete integrity impact. Availability impact (A:C) Complete availability impact.	6.8	10.0	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

8.5

2.0

HIGH

AV:N/AC:M/Au:S/C:C/I:C/A:C Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:M): Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:S): A single authentication is required.
Confidentiality impact (C:C): Complete confidentiality impact.
Integrity impact (I:C): Complete integrity impact.
Availability impact (A:C): Complete availability impact.

6.8

10.0

[email protected]

OS Trackers for CVE-2010-1169

vendor	priority	summary	link
`gentoo`	normal	CVE-2010-1169: 1 GLSA(s) (201110-22), 3 atom(s) (dev-db/postgresql, dev-db/postgresql-base, dev-db/postgresql-server); latest impact normal.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2010-1169
`redhat`	medium	—	https://access.redhat.com/security/cve/CVE-2010-1169
`ubuntu`	medium	CVE-2010-1169 medium priority: Ubuntu including 6 source packages (postgresql-7.4, postgresql-8.0, postgresql-8.1, postgresql-8.2, postgresql-8.3, postgresql-8.4), 48 status rows across 8 suites (dapper, hardy, jaunty, karmic, lucid, maverick, natty, upstream): DNE 31, released 10, ignored 4, needs-triage 3.	https://ubuntu.com/security/CVE-2010-1169

Affected software / configurations for CVE-2010-1169

Vendor	Product	Version	Raw CPE
postgresql	postgresql	7.4	cpe:2.3:a:postgresql:postgresql:7.4:::::::*
postgresql	postgresql	7.4.1	cpe:2.3:a:postgresql:postgresql:7.4.1:::::::*
postgresql	postgresql	7.4.2	cpe:2.3:a:postgresql:postgresql:7.4.2:::::::*
postgresql	postgresql	7.4.3	cpe:2.3:a:postgresql:postgresql:7.4.3:::::::*
postgresql	postgresql	7.4.4	cpe:2.3:a:postgresql:postgresql:7.4.4:::::::*
postgresql	postgresql	7.4.5	cpe:2.3:a:postgresql:postgresql:7.4.5:::::::*
postgresql	postgresql	7.4.6	cpe:2.3:a:postgresql:postgresql:7.4.6:::::::*
postgresql	postgresql	7.4.7	cpe:2.3:a:postgresql:postgresql:7.4.7:::::::*
postgresql	postgresql	7.4.8	cpe:2.3:a:postgresql:postgresql:7.4.8:::::::*
postgresql	postgresql	7.4.9	cpe:2.3:a:postgresql:postgresql:7.4.9:::::::*
postgresql	postgresql	7.4.10	cpe:2.3:a:postgresql:postgresql:7.4.10:::::::*
postgresql	postgresql	7.4.11	cpe:2.3:a:postgresql:postgresql:7.4.11:::::::*
postgresql	postgresql	7.4.12	cpe:2.3:a:postgresql:postgresql:7.4.12:::::::*
postgresql	postgresql	7.4.13	cpe:2.3:a:postgresql:postgresql:7.4.13:::::::*
postgresql	postgresql	7.4.14	cpe:2.3:a:postgresql:postgresql:7.4.14:::::::*
postgresql	postgresql	7.4.15	cpe:2.3:a:postgresql:postgresql:7.4.15:::::::*
postgresql	postgresql	7.4.16	cpe:2.3:a:postgresql:postgresql:7.4.16:::::::*
postgresql	postgresql	7.4.17	cpe:2.3:a:postgresql:postgresql:7.4.17:::::::*
postgresql	postgresql	7.4.18	cpe:2.3:a:postgresql:postgresql:7.4.18:::::::*
postgresql	postgresql	7.4.19	cpe:2.3:a:postgresql:postgresql:7.4.19:::::::*
postgresql	postgresql	7.4.20	cpe:2.3:a:postgresql:postgresql:7.4.20:::::::*
postgresql	postgresql	7.4.21	cpe:2.3:a:postgresql:postgresql:7.4.21:::::::*
postgresql	postgresql	7.4.22	cpe:2.3:a:postgresql:postgresql:7.4.22:::::::*
postgresql	postgresql	7.4.23	cpe:2.3:a:postgresql:postgresql:7.4.23:::::::*
postgresql	postgresql	7.4.24	cpe:2.3:a:postgresql:postgresql:7.4.24:::::::*
postgresql	postgresql	7.4.25	cpe:2.3:a:postgresql:postgresql:7.4.25:::::::*
postgresql	postgresql	7.4.26	cpe:2.3:a:postgresql:postgresql:7.4.26:::::::*
postgresql	postgresql	7.4.27	cpe:2.3:a:postgresql:postgresql:7.4.27:::::::*
postgresql	postgresql	7.4.28	cpe:2.3:a:postgresql:postgresql:7.4.28:::::::*
postgresql	postgresql	8.0	cpe:2.3:a:postgresql:postgresql:8.0:::::::*
postgresql	postgresql	8.0.0	cpe:2.3:a:postgresql:postgresql:8.0.0:::::::*
postgresql	postgresql	8.0.1	cpe:2.3:a:postgresql:postgresql:8.0.1:::::::*
postgresql	postgresql	8.0.2	cpe:2.3:a:postgresql:postgresql:8.0.2:::::::*
postgresql	postgresql	8.0.3	cpe:2.3:a:postgresql:postgresql:8.0.3:::::::*
postgresql	postgresql	8.0.4	cpe:2.3:a:postgresql:postgresql:8.0.4:::::::*
postgresql	postgresql	8.0.5	cpe:2.3:a:postgresql:postgresql:8.0.5:::::::*
postgresql	postgresql	8.0.6	cpe:2.3:a:postgresql:postgresql:8.0.6:::::::*
postgresql	postgresql	8.0.7	cpe:2.3:a:postgresql:postgresql:8.0.7:::::::*
postgresql	postgresql	8.0.8	cpe:2.3:a:postgresql:postgresql:8.0.8:::::::*
postgresql	postgresql	8.0.9	cpe:2.3:a:postgresql:postgresql:8.0.9:::::::*
postgresql	postgresql	8.0.10	cpe:2.3:a:postgresql:postgresql:8.0.10:::::::*
postgresql	postgresql	8.0.11	cpe:2.3:a:postgresql:postgresql:8.0.11:::::::*
postgresql	postgresql	8.0.12	cpe:2.3:a:postgresql:postgresql:8.0.12:::::::*
postgresql	postgresql	8.0.13	cpe:2.3:a:postgresql:postgresql:8.0.13:::::::*
postgresql	postgresql	8.0.14	cpe:2.3:a:postgresql:postgresql:8.0.14:::::::*
postgresql	postgresql	8.0.15	cpe:2.3:a:postgresql:postgresql:8.0.15:::::::*
postgresql	postgresql	8.0.16	cpe:2.3:a:postgresql:postgresql:8.0.16:::::::*
postgresql	postgresql	8.0.17	cpe:2.3:a:postgresql:postgresql:8.0.17:::::::*
postgresql	postgresql	8.0.18	cpe:2.3:a:postgresql:postgresql:8.0.18:::::::*
postgresql	postgresql	8.0.19	cpe:2.3:a:postgresql:postgresql:8.0.19:::::::*
postgresql	postgresql	8.0.20	cpe:2.3:a:postgresql:postgresql:8.0.20:::::::*
postgresql	postgresql	8.0.21	cpe:2.3:a:postgresql:postgresql:8.0.21:::::::*
postgresql	postgresql	8.0.22	cpe:2.3:a:postgresql:postgresql:8.0.22:::::::*
postgresql	postgresql	8.0.23	cpe:2.3:a:postgresql:postgresql:8.0.23:::::::*
postgresql	postgresql	8.0.24	cpe:2.3:a:postgresql:postgresql:8.0.24:::::::*
postgresql	postgresql	8.1	cpe:2.3:a:postgresql:postgresql:8.1:::::::*
postgresql	postgresql	8.1.0	cpe:2.3:a:postgresql:postgresql:8.1.0:::::::*
postgresql	postgresql	8.1.1	cpe:2.3:a:postgresql:postgresql:8.1.1:::::::*
postgresql	postgresql	8.1.2	cpe:2.3:a:postgresql:postgresql:8.1.2:::::::*
postgresql	postgresql	8.1.3	cpe:2.3:a:postgresql:postgresql:8.1.3:::::::*
postgresql	postgresql	8.1.4	cpe:2.3:a:postgresql:postgresql:8.1.4:::::::*
postgresql	postgresql	8.1.5	cpe:2.3:a:postgresql:postgresql:8.1.5:::::::*
postgresql	postgresql	8.1.6	cpe:2.3:a:postgresql:postgresql:8.1.6:::::::*
postgresql	postgresql	8.1.7	cpe:2.3:a:postgresql:postgresql:8.1.7:::::::*
postgresql	postgresql	8.1.8	cpe:2.3:a:postgresql:postgresql:8.1.8:::::::*
postgresql	postgresql	8.1.9	cpe:2.3:a:postgresql:postgresql:8.1.9:::::::*
postgresql	postgresql	8.1.10	cpe:2.3:a:postgresql:postgresql:8.1.10:::::::*
postgresql	postgresql	8.1.11	cpe:2.3:a:postgresql:postgresql:8.1.11:::::::*
postgresql	postgresql	8.1.12	cpe:2.3:a:postgresql:postgresql:8.1.12:::::::*
postgresql	postgresql	8.1.13	cpe:2.3:a:postgresql:postgresql:8.1.13:::::::*
postgresql	postgresql	8.1.14	cpe:2.3:a:postgresql:postgresql:8.1.14:::::::*
postgresql	postgresql	8.1.15	cpe:2.3:a:postgresql:postgresql:8.1.15:::::::*
postgresql	postgresql	8.1.16	cpe:2.3:a:postgresql:postgresql:8.1.16:::::::*
postgresql	postgresql	8.1.17	cpe:2.3:a:postgresql:postgresql:8.1.17:::::::*
postgresql	postgresql	8.1.18	cpe:2.3:a:postgresql:postgresql:8.1.18:::::::*
postgresql	postgresql	8.1.19	cpe:2.3:a:postgresql:postgresql:8.1.19:::::::*
postgresql	postgresql	8.1.20	cpe:2.3:a:postgresql:postgresql:8.1.20:::::::*
postgresql	postgresql	8.2	cpe:2.3:a:postgresql:postgresql:8.2:::::::*
postgresql	postgresql	8.2.1	cpe:2.3:a:postgresql:postgresql:8.2.1:::::::*
postgresql	postgresql	8.2.2	cpe:2.3:a:postgresql:postgresql:8.2.2:::::::*

References for CVE-2010-1169

URL	Tags
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041559.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041579.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041591.html
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://marc.info/?l=bugtraq&m=134124585221119&w=2
http://osvdb.org/64755
http://secunia.com/advisories/39815
http://secunia.com/advisories/39820
http://secunia.com/advisories/39845	Vendor Advisory
http://secunia.com/advisories/39898
http://secunia.com/advisories/39939
http://www.debian.org/security/2010/dsa-2051
http://www.mandriva.com/security/advisories?name=MDVSA-2010:103
http://www.openwall.com/lists/oss-security/2010/05/20/5
http://www.postgresql.org/about/news.1203	Patch
http://www.postgresql.org/docs/current/static/release-7-4-29.html
http://www.postgresql.org/docs/current/static/release-8-0-25.html
http://www.postgresql.org/docs/current/static/release-8-1-21.html
http://www.postgresql.org/docs/current/static/release-8-2-17.html
http://www.postgresql.org/docs/current/static/release-8-3-11.html
http://www.postgresql.org/docs/current/static/release-8-4-4.html
http://www.postgresql.org/support/security
http://www.redhat.com/support/errata/RHSA-2010-0427.html
http://www.redhat.com/support/errata/RHSA-2010-0428.html
http://www.redhat.com/support/errata/RHSA-2010-0429.html
http://www.redhat.com/support/errata/RHSA-2010-0430.html
http://www.securityfocus.com/bid/40215
http://www.securitytracker.com/id?1023988
http://www.vupen.com/english/advisories/2010/1167	Vendor Advisory
http://www.vupen.com/english/advisories/2010/1182
http://www.vupen.com/english/advisories/2010/1197
http://www.vupen.com/english/advisories/2010/1198
http://www.vupen.com/english/advisories/2010/1207
http://www.vupen.com/english/advisories/2010/1221
https://bugzilla.redhat.com/show_bug.cgi?id=582615
https://bugzilla.redhat.com/show_bug.cgi?id=588269
https://exchange.xforce.ibmcloud.com/vulnerabilities/58693
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10645

URL

CVE-2010-1169

Exploit prediction scoring system (EPSS) score for CVE-2010-1169

Common vulnerability scoring system (CVSS) metrics for CVE-2010-1169

Weakness enumeration for CVE-2010-1169

OS Trackers for CVE-2010-1169

Affected software / configurations for CVE-2010-1169

References for CVE-2010-1169