PostgreSQL — свободная объектно-реляционная система управления базами данных.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 017
BDU:2019-04641
Уязвимость системы управления базами данных PostgreSQL, связанная с некорректным контролем доступа, позволяющая нарушителю получить доступ к конфиденциальным данным
SUSE-SU-2019:1783-1
Security update for postgresql10
openSUSE-SU-2019:1668-1
Security update for postgresql96
CVE-2019-10164
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
CVE-2019-10164
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are ...
CVE-2019-10164
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
SUSE-SU-2019:1687-1
Security update for postgresql96
CVE-2019-10164
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
BDU:2019-02385
Множественные уязвимости системы управления базами данных PostgreSQL, вызванные переполнением буфера на стеке, позволяющие нарушителю выполнить произвольный код
openSUSE-SU-2019:1578-1
Security update for postgresql10
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
BDU:2019-04641 Уязвимость системы управления базами данных PostgreSQL, связанная с некорректным контролем доступа, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 4.3 | 0% Низкий | больше 6 лет назад | |
SUSE-SU-2019:1783-1 Security update for postgresql10 | 6% Низкий | больше 6 лет назад | ||
openSUSE-SU-2019:1668-1 Security update for postgresql96 | 0% Низкий | больше 6 лет назад | ||
CVE-2019-10164 PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account. | CVSS3: 8.8 | 6% Низкий | почти 7 лет назад | |
CVE-2019-10164 PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are ... | CVSS3: 8.8 | 6% Низкий | почти 7 лет назад | |
CVE-2019-10164 PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account. | CVSS3: 8.8 | 6% Низкий | почти 7 лет назад | |
SUSE-SU-2019:1687-1 Security update for postgresql96 | 0% Низкий | почти 7 лет назад | ||
CVE-2019-10164 PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account. | CVSS3: 7.5 | 6% Низкий | почти 7 лет назад | |
BDU:2019-02385 Множественные уязвимости системы управления базами данных PostgreSQL, вызванные переполнением буфера на стеке, позволяющие нарушителю выполнить произвольный код | CVSS3: 7.5 | 6% Низкий | почти 7 лет назад | |
openSUSE-SU-2019:1578-1 Security update for postgresql10 | 0% Низкий | почти 7 лет назад |
Уязвимостей на страницу