Логотип exploitDog
bind:"BDU:2021-04174" OR bind:"CVE-2021-3677"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2021-04174" OR bind:"CVE-2021-3677"

Количество 18

Количество 18

fstec логотип

BDU:2021-04174

почти 4 года назад

Уязвимость системы управления базами данных PostgreSQL, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2021-3677

больше 3 лет назад

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2021-3677

почти 4 года назад

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2021-3677

больше 3 лет назад

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

CVSS3: 6.5
EPSS: Низкий
msrc логотип

CVE-2021-3677

больше 3 лет назад

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2021-3677

больше 3 лет назад

A flaw was found in postgresql. A purpose-crafted query can read arbit ...

CVSS3: 6.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:3256-1

больше 3 лет назад

Security update for postgresql12

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:3255-1

больше 3 лет назад

Security update for postgresql13

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3256-1

больше 3 лет назад

Security update for postgresql12

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3255-1

больше 3 лет назад

Security update for postgresql13

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3120-1

почти 4 года назад

Security update for postgresql13

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3119-1

почти 4 года назад

Security update for postgresql12

EPSS: Низкий
github логотип

GHSA-j859-w9g7-8276

больше 3 лет назад

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

CVSS3: 6.5
EPSS: Низкий
rocky логотип

RLSA-2021:5236

больше 3 лет назад

Moderate: postgresql:13 security update

EPSS: Низкий
rocky логотип

RLSA-2021:5235

больше 3 лет назад

Moderate: postgresql:12 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2021-5236

больше 3 лет назад

ELSA-2021-5236: postgresql:13 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2021-5235

больше 3 лет назад

ELSA-2021-5235: postgresql:12 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2958-1

почти 3 года назад

Security update for postgresql12

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2021-04174

Уязвимость системы управления базами данных PostgreSQL, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании

CVSS3: 9.8
0%
Низкий
почти 4 года назад
ubuntu логотип
CVE-2021-3677

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
redhat логотип
CVE-2021-3677

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

CVSS3: 6.5
0%
Низкий
почти 4 года назад
nvd логотип
CVE-2021-3677

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
msrc логотип
CVSS3: 6.5
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2021-3677

A flaw was found in postgresql. A purpose-crafted query can read arbit ...

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2021:3256-1

Security update for postgresql12

0%
Низкий
больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2021:3255-1

Security update for postgresql13

0%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3256-1

Security update for postgresql12

0%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3255-1

Security update for postgresql13

0%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3120-1

Security update for postgresql13

0%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:3119-1

Security update for postgresql12

0%
Низкий
почти 4 года назад
github логотип
GHSA-j859-w9g7-8276

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
rocky логотип
RLSA-2021:5236

Moderate: postgresql:13 security update

больше 3 лет назад
rocky логотип
RLSA-2021:5235

Moderate: postgresql:12 security update

больше 3 лет назад
oracle-oval логотип
ELSA-2021-5236

ELSA-2021-5236: postgresql:13 security update (MODERATE)

больше 3 лет назад
oracle-oval логотип
ELSA-2021-5235

ELSA-2021-5235: postgresql:12 security update (MODERATE)

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2958-1

Security update for postgresql12

почти 3 года назад

Уязвимостей на страницу