Поиск уязвимостей

Уязвимость системы управления базами данных PostgreSQL, связанная с отсутствием защиты служебных данных в вызовах функций с агрегацией, позволяющая нарушителю раскрыть защищаемую информацию

Множественные уязвимости postgresql14

ALT-PU-2023-7207: package `postgresql15-1C` update to version 15.5-alt0.p10.2

ALT-PU-2023-7090: package `postgresql15` update to version 15.5-alt0.p10.1

ALT-PU-2023-7089: package `postgresql14` update to version 14.10-alt0.p10.1

ALT-PU-2023-7088: package `postgresql13` update to version 13.13-alt0.p10.1

ALT-PU-2023-7087: package `postgresql12` update to version 12.17-alt0.p10.1

ALT-PU-2023-7086: package `postgresql11` update to version 11.22-alt0.p10.1

ALT-PU-2023-7062: package `postgresql14` update to version 14.10-alt1

ALT-PU-2023-7061: package `postgresql16` update to version 16.1-alt1

ALT-PU-2023-7060: package `postgresql15` update to version 15.5-alt1

ALT-PU-2023-7059: package `postgresql12` update to version 12.17-alt1

ALT-PU-2023-7058: package `postgresql15-1C` update to version 15.5-alt1

ALT-PU-2023-7057: package `postgresql13` update to version 13.13-alt1

Множественные уязвимости postgresql15

Множественные уязвимости postgresql13

Множественные уязвимости postgresql

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.