Количество 28
Количество 28

RLSA-2022:7128
Moderate: postgresql:12 security update
GHSA-m7mv-m566-78j6
A vulnerability found in postgresql. On this security issue an attack requires permission to create non-temporary objects in at least one schema, ability to lure or wait for an administrator to create or update an affected extension in that schema, and ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, the attacker can run arbitrary code as the victim role, which may be a superuser. Known-affected extensions include both PostgreSQL-bundled and non-bundled extensions. PostgreSQL blocks this attack in the core server, so there's no need to modify individual extensions.
ELSA-2023-0113
ELSA-2023-0113: postgresql:10 security update (MODERATE)
ELSA-2022-7128
ELSA-2022-7128: postgresql:12 security update (MODERATE)
ELSA-2023-1693
ELSA-2023-1693: postgresql security update (MODERATE)
ELSA-2023-1576
ELSA-2023-1576: postgresql:13 security update (MODERATE)

SUSE-SU-2022:2893-1
Security update for postgresql10

SUSE-SU-2022:2958-1
Security update for postgresql12
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | RLSA-2022:7128 Moderate: postgresql:12 security update | 1% Низкий | больше 2 лет назад | |
GHSA-m7mv-m566-78j6 A vulnerability found in postgresql. On this security issue an attack requires permission to create non-temporary objects in at least one schema, ability to lure or wait for an administrator to create or update an affected extension in that schema, and ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, the attacker can run arbitrary code as the victim role, which may be a superuser. Known-affected extensions include both PostgreSQL-bundled and non-bundled extensions. PostgreSQL blocks this attack in the core server, so there's no need to modify individual extensions. | CVSS3: 8 | 1% Низкий | почти 3 года назад | |
ELSA-2023-0113 ELSA-2023-0113: postgresql:10 security update (MODERATE) | больше 2 лет назад | |||
ELSA-2022-7128 ELSA-2022-7128: postgresql:12 security update (MODERATE) | больше 2 лет назад | |||
ELSA-2023-1693 ELSA-2023-1693: postgresql security update (MODERATE) | около 2 лет назад | |||
ELSA-2023-1576 ELSA-2023-1576: postgresql:13 security update (MODERATE) | около 2 лет назад | |||
![]() | SUSE-SU-2022:2893-1 Security update for postgresql10 | почти 3 года назад | ||
![]() | SUSE-SU-2022:2958-1 Security update for postgresql12 | почти 3 года назад |
Уязвимостей на страницу