ALT-PU-2015-2850

Критический

ALT-PU-2015-2850: package postgresql9.4 update to version 9.4.1-alt1

Источник

errata.altlinux.org

Дата публикации

04.02.2015

Дата обновления

04.02.2015

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades postgresql9.4 to version 9.4.1-alt1.

Устраненные уязвимости6

CVE-2014-8161

Средний 4.3

Дата публикации: 27.01.2020

CWE-209

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.

CVSS 3.1

Средний 4.3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: Low
Integrity: None
Availability: None

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:P/I:N/A:N

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2014-8161 https://nvd.nist.gov/vuln/detail/CVE-2014-8161

Ссылки1

ALT-PU-2015-2850 https://errata.altlinux.org/ALT-PU-2015-2850

Связанные уязвимости

SUSE-SU-2015:0639-1

suse-cvrf

больше 11 лет назад

Security update for postgresql91

SUSE-SU-2015:0478-1

suse-cvrf

больше 11 лет назад

Security update for postgresql93

ELSA-2015-0750

oracle-oval

больше 11 лет назад

ELSA-2015-0750: postgresql security update (MODERATE)

CVE-2014-8161

CVSS3: 4.3

ubuntu

почти 7 лет назад

CVE-2014-8161

redhat

почти 12 лет назад