Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-7548

Опубликовано: 16 авг. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4
CVSS3: 7.5

Описание

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.

РелизСтатусПримечание
artful

DNE

bionic

not-affected

10.1-1
cosmic

not-affected

10.1-1
devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

10.1-1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
precise/esm

not-affected

code not present
trusty

ignored

end of standard support
trusty/esm

DNE

trusty was needs-triage
upstream

needs-triage

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

not-affected

9.3.18-0ubuntu0.14.04.1
precise/esm

DNE

trusty

released

9.3.18-0ubuntu0.14.04.1
trusty/esm

not-affected

9.3.18-0ubuntu0.14.04.1
upstream

released

9.3.18

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

9.5.8-0ubuntu0.16.04.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
artful

not-affected

9.6.4-1
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

9.6.4-1

Показывать по

EPSS

Процентиль: 75%
0.00927
Низкий

4 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 5.4
redhat
почти 8 лет назад

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.

CVSS3: 7.5
nvd
почти 8 лет назад

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.

CVSS3: 7.5
debian
почти 8 лет назад

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to a ...

CVSS3: 7.5
github
около 3 лет назад

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.

fstec
около 8 лет назад

Уязвимость системы управления базами данных PostgreSQL, вызванная недостатками авторизации, позволяющая нарушителю вызвать отказ системы

EPSS

Процентиль: 75%
0.00927
Низкий

4 Medium

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2017-7548