PostgreSQL — свободная объектно-реляционная система управления базами данных.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.10 | 17.10 | ||
| 17.9 | 17.9 | ||
| 17.8 | 17.8 | ||
| 17.7 | 17.7 | ||
| 17.6 | 17.6 | ||
| 17.5 | 17.5 | ||
| 17.4 | 17.4 | ||
| 17.3 | 17.3 | ||
| 17.2 | 17.2 | ||
| 17.1 | 17.1 |
Показывать по
Количество 1 129
CVE-2021-32029
A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVE-2021-32029
A flaw was found in postgresql. Using an UPDATE ... RETURNING command ...
CVE-2021-32029
A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
openSUSE-SU-2021:3256-1
Security update for postgresql12
SUSE-SU-2021:3256-1
Security update for postgresql12
openSUSE-SU-2021:3255-1
Security update for postgresql13
SUSE-SU-2021:3255-1
Security update for postgresql13
SUSE-SU-2021:3120-1
Security update for postgresql13
SUSE-SU-2021:3119-1
Security update for postgresql12
CVE-2021-3677
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2021-32029 A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality. | CVSS3: 6.5 | 2% Низкий | почти 5 лет назад |
| CVE-2021-32029 A flaw was found in postgresql. Using an UPDATE ... RETURNING command ... | CVSS3: 6.5 | 2% Низкий | почти 5 лет назад |
 | CVE-2021-32029 A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality. | CVSS3: 6.5 | 2% Низкий | почти 5 лет назад |
 | openSUSE-SU-2021:3256-1 Security update for postgresql12 | 1% Низкий | почти 5 лет назад | |
| SUSE-SU-2021:3256-1 Security update for postgresql12 | 1% Низкий | почти 5 лет назад | |
| openSUSE-SU-2021:3255-1 Security update for postgresql13 | 1% Низкий | почти 5 лет назад | |
| SUSE-SU-2021:3255-1 Security update for postgresql13 | 1% Низкий | почти 5 лет назад | |
| SUSE-SU-2021:3120-1 Security update for postgresql13 | 1% Низкий | почти 5 лет назад | |
| SUSE-SU-2021:3119-1 Security update for postgresql12 | 1% Низкий | почти 5 лет назад | |
 | CVE-2021-3677 A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting. | CVSS3: 6.5 | 1% Низкий | почти 5 лет назад |
Уязвимостей на страницу