Поиск уязвимостей
Количество 21
Количество 21
CVE-2018-10915
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.
CVE-2018-10915
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.
CVE-2018-10915
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.
CVE-2018-10915
A vulnerability was found in libpq, the default PostgreSQL client libr ...
openSUSE-SU-2018:4007-1
Security update for postgresql94
SUSE-SU-2018:3909-1
Security update for postgresql94
SUSE-SU-2018:3287-1
Security update for postgresql94
GHSA-q7vw-gjh3-qf97
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.
ELSA-2018-2557
ELSA-2018-2557: postgresql security update (IMPORTANT)
BDU:2019-01231
Уязвимость функции PQescape() библиотеки libpq системы управления базами данных PostgreSQL, позволяющая нарушителю раскрыть защищаемую информацию
openSUSE-SU-2018:3449-1
Security update for postgresql96
SUSE-SU-2018:3377-1
Security update for postgresql96
ALT-PU-2018-2135
ALT-PU-2018-2135: package `postgresql9.3` update to version 9.3.24-alt1
ALT-PU-2018-2134
ALT-PU-2018-2134: package `postgresql9.4` update to version 9.4.19-alt1
openSUSE-SU-2018:2599-1
Security update for postgresql10
SUSE-SU-2018:2564-1
Security update for postgresql10
ALT-PU-2018-2136
ALT-PU-2018-2136: package `postgresql10` update to version 10.5-alt1
ALT-PU-2018-2133
ALT-PU-2018-2133: package `postgresql9.5` update to version 9.5.14-alt1
ALT-PU-2018-2132
ALT-PU-2018-2132: package `postgresql9.6` update to version 9.6.10-alt1
ALT-PU-2018-2131
ALT-PU-2018-2131: package `postgresql9.6-1C` update to version 9.6.10-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-10915 A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected. | CVSS3: 7.5 | 5% Низкий | около 8 лет назад |
 | CVE-2018-10915 A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected. | CVSS3: 8.5 | 5% Низкий | около 8 лет назад |
 | CVE-2018-10915 A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected. | CVSS3: 7.5 | 5% Низкий | около 8 лет назад |
| CVE-2018-10915 A vulnerability was found in libpq, the default PostgreSQL client libr ... | CVSS3: 7.5 | 5% Низкий | около 8 лет назад |
 | openSUSE-SU-2018:4007-1 Security update for postgresql94 | 5% Низкий | почти 8 лет назад | |
| SUSE-SU-2018:3909-1 Security update for postgresql94 | 5% Низкий | почти 8 лет назад | |
| SUSE-SU-2018:3287-1 Security update for postgresql94 | 5% Низкий | около 8 лет назад | |
| GHSA-q7vw-gjh3-qf97 A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected. | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
| ELSA-2018-2557 ELSA-2018-2557: postgresql security update (IMPORTANT) | 5% Низкий | около 8 лет назад | |
 | BDU:2019-01231 Уязвимость функции PQescape() библиотеки libpq системы управления базами данных PostgreSQL, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 7.5 | 5% Низкий | больше 8 лет назад |
| openSUSE-SU-2018:3449-1 Security update for postgresql96 | около 8 лет назад | ||
| SUSE-SU-2018:3377-1 Security update for postgresql96 | около 8 лет назад | ||
| ALT-PU-2018-2135 ALT-PU-2018-2135: package `postgresql9.3` update to version 9.3.24-alt1 | CVSS3: 7.5 | 5% Низкий | около 8 лет назад |
| ALT-PU-2018-2134 ALT-PU-2018-2134: package `postgresql9.4` update to version 9.4.19-alt1 | CVSS3: 7.5 | 5% Низкий | около 8 лет назад |
| openSUSE-SU-2018:2599-1 Security update for postgresql10 | около 8 лет назад | ||
| SUSE-SU-2018:2564-1 Security update for postgresql10 | около 8 лет назад | ||
| ALT-PU-2018-2136 ALT-PU-2018-2136: package `postgresql10` update to version 10.5-alt1 | CVSS3: 8.1 | около 8 лет назад | |
| ALT-PU-2018-2133 ALT-PU-2018-2133: package `postgresql9.5` update to version 9.5.14-alt1 | CVSS3: 8.1 | около 8 лет назад | |
| ALT-PU-2018-2132 ALT-PU-2018-2132: package `postgresql9.6` update to version 9.6.10-alt1 | CVSS3: 8.1 | около 8 лет назад | |
| ALT-PU-2018-2131 ALT-PU-2018-2131: package `postgresql9.6-1C` update to version 9.6.10-alt1 | CVSS3: 8.1 | около 8 лет назад |
Уязвимостей на страницу