Поиск уязвимостей

Уязвимость системы управления базами данных PostgreSQL, связанная с возможностью рассылки сигналов процессам суперпользователей с помощью роли pg_signal_backend, позволяющая нарушителю вызвать отказ в обслуживании определенного фонового процесса

Множественные уязвимости postgresql14

ALT-PU-2023-7207: package `postgresql15-1C` update to version 15.5-alt0.p10.2

ALT-PU-2023-7090: package `postgresql15` update to version 15.5-alt0.p10.1

ALT-PU-2023-7089: package `postgresql14` update to version 14.10-alt0.p10.1

ALT-PU-2023-7088: package `postgresql13` update to version 13.13-alt0.p10.1

ALT-PU-2023-7087: package `postgresql12` update to version 12.17-alt0.p10.1

ALT-PU-2023-7086: package `postgresql11` update to version 11.22-alt0.p10.1

ALT-PU-2023-7062: package `postgresql14` update to version 14.10-alt1

ALT-PU-2023-7061: package `postgresql16` update to version 16.1-alt1

ALT-PU-2023-7060: package `postgresql15` update to version 15.5-alt1

ALT-PU-2023-7059: package `postgresql12` update to version 12.17-alt1

ALT-PU-2023-7058: package `postgresql15-1C` update to version 15.5-alt1

ALT-PU-2023-7057: package `postgresql13` update to version 13.13-alt1

Множественные уязвимости postgresql15

Множественные уязвимости postgresql13

Множественные уязвимости postgresql

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.