Количество 35
Количество 35
BDU:2024-01121
Уязвимость функции REFRESH MATERIALIZED VIEW CONCURRENTLY системы управления базами данных PostgreSQL, позволяющая нарушителю выполнять произвольные SQL-команды
ROS-20240626-14
Уязвимость postgresql-1c
ROS-20240322-05
Уязвимость PostgreSQL 16
ROS-20240322-04
Уязвимость PostgreSQL 15
ROS-20240322-03
Уязвимость PostgreSQL 14
ROS-20240322-02
Уязвимость PostgreSQL 13
ROS-20240322-01
Уязвимость PostgreSQL 12
CVE-2024-0985
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.
CVE-2024-0985
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.
CVE-2024-0985
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.
CVE-2024-0985
PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL
CVE-2024-0985
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in Postg ...
SUSE-SU-2024:0552-1
Security update for postgresql14
SUSE-SU-2024:0551-1
Security update for postgresql15
SUSE-SU-2024:0550-1
Security update for postgresql16
SUSE-SU-2024:0546-1
Security update for postgresql16
SUSE-SU-2024:0542-1
Security update for postgresql12
SUSE-SU-2024:0541-1
Security update for postgresql13
SUSE-SU-2024:0540-1
Security update for postgresql14
SUSE-SU-2024:0523-1
Security update for postgresql12
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-01121 Уязвимость функции REFRESH MATERIALIZED VIEW CONCURRENTLY системы управления базами данных PostgreSQL, позволяющая нарушителю выполнять произвольные SQL-команды | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
 | ROS-20240626-14 Уязвимость postgresql-1c | CVSS3: 8 | 1% Низкий | около 2 лет назад |
| ROS-20240322-05 Уязвимость PostgreSQL 16 | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
| ROS-20240322-04 Уязвимость PostgreSQL 15 | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
| ROS-20240322-03 Уязвимость PostgreSQL 14 | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
| ROS-20240322-02 Уязвимость PostgreSQL 13 | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
| ROS-20240322-01 Уязвимость PostgreSQL 12 | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-0985 Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected. | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-0985 Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected. | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-0985 Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected. | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-0985 PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL | CVSS3: 8 | 1% Низкий | 5 месяцев назад |
| CVE-2024-0985 Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in Postg ... | CVSS3: 8 | 1% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:0552-1 Security update for postgresql14 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0551-1 Security update for postgresql15 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0550-1 Security update for postgresql16 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0546-1 Security update for postgresql16 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0542-1 Security update for postgresql12 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0541-1 Security update for postgresql13 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0540-1 Security update for postgresql14 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0523-1 Security update for postgresql12 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу