Поиск уязвимостей
Количество 27
Количество 27
SUSE-SU-2018:3909-1
Security update for postgresql94
SUSE-SU-2018:3287-1
Security update for postgresql94
GHSA-q7vw-gjh3-qf97
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.
ELSA-2018-2557
ELSA-2018-2557: postgresql security update (IMPORTANT)
BDU:2019-01231
Уязвимость функции PQescape() библиотеки libpq системы управления базами данных PostgreSQL, позволяющая нарушителю раскрыть защищаемую информацию
ALT-PU-2018-2135
ALT-PU-2018-2135: package `postgresql9.3` update to version 9.3.24-alt1
ALT-PU-2018-2134
ALT-PU-2018-2134: package `postgresql9.4` update to version 9.4.19-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
SUSE-SU-2018:3909-1 Security update for postgresql94 | 5% Низкий | почти 8 лет назад | ||
SUSE-SU-2018:3287-1 Security update for postgresql94 | 5% Низкий | около 8 лет назад | ||
GHSA-q7vw-gjh3-qf97 A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected. | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад | |
ELSA-2018-2557 ELSA-2018-2557: postgresql security update (IMPORTANT) | 5% Низкий | около 8 лет назад | ||
BDU:2019-01231 Уязвимость функции PQescape() библиотеки libpq системы управления базами данных PostgreSQL, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 7.5 | 5% Низкий | больше 8 лет назад | |
ALT-PU-2018-2135 ALT-PU-2018-2135: package `postgresql9.3` update to version 9.3.24-alt1 | CVSS3: 7.5 | 5% Низкий | около 8 лет назад | |
ALT-PU-2018-2134 ALT-PU-2018-2134: package `postgresql9.4` update to version 9.4.19-alt1 | CVSS3: 7.5 | 5% Низкий | около 8 лет назад |
Уязвимостей на страницу