Количество 56
Количество 56
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
PostgreSQL discloses MD5-hashed passwords via covert timing channel
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreS ...
RLSA-2026:28208
Important: postgresql:13 security update
GHSA-r6v6-v5r9-3ggh
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
ELSA-2026-28208
ELSA-2026-28208: postgresql:13 security update (IMPORTANT)
BDU:2026-07097
Уязвимость системы управления базами данных PostgreSQL, связанная с раскрытием информации на основании временных расхождений, позволяющая нарушителю раскрыть защищаемую информацию
ROS-20260708-73-0080
Уязвимость postgresql16
ROS-20260708-73-0025
Уязвимость postgresql18-1c
ROS-20260708-73-0024
Уязвимость postgresql18
ROS-20260708-73-0023
Уязвимость postgresql17-1c
ROS-20260708-73-0022
Уязвимость postgresql17
ROS-20260708-73-0021
Уязвимость postgresql15-1c
ROS-20260708-73-0020
Уязвимость postgresql15
ROS-20260708-73-0019
Уязвимость postgresql-1c
ROS-20260708-73-0018
Уязвимость postgresql14
RLSA-2026:28999
Important: postgresql:12 security update
RLSA-2026:28143
Important: postgresql:16 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.2 | 1% Низкий | 3 месяца назад |
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
| CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreS ... | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
 | RLSA-2026:28208 Important: postgresql:13 security update | 1% Низкий | около 1 месяца назад | |
| GHSA-r6v6-v5r9-3ggh Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
| ELSA-2026-28208 ELSA-2026-28208: postgresql:13 security update (IMPORTANT) | около 1 месяца назад | ||
 | BDU:2026-07097 Уязвимость системы управления базами данных PostgreSQL, связанная с раскрытием информации на основании временных расхождений, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
 | ROS-20260708-73-0080 Уязвимость postgresql16 | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| ROS-20260708-73-0025 Уязвимость postgresql18-1c | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| ROS-20260708-73-0024 Уязвимость postgresql18 | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| ROS-20260708-73-0023 Уязвимость postgresql17-1c | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| ROS-20260708-73-0022 Уязвимость postgresql17 | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| ROS-20260708-73-0021 Уязвимость postgresql15-1c | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| ROS-20260708-73-0020 Уязвимость postgresql15 | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| ROS-20260708-73-0019 Уязвимость postgresql-1c | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| ROS-20260708-73-0018 Уязвимость postgresql14 | CVSS3: 6.5 | 1% Низкий | 23 дня назад |
| RLSA-2026:28999 Important: postgresql:12 security update | около 1 месяца назад | ||
| RLSA-2026:28143 Important: postgresql:16 security update | около 1 месяца назад |
Уязвимостей на страницу