Количество 29
Количество 29
CVE-2023-5868
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVE-2023-5868
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVE-2023-5868
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVE-2023-5868
Postgresql: memory disclosure in aggregate function calls
CVE-2023-5868
A memory disclosure vulnerability was found in PostgreSQL that allows ...
GHSA-3f9w-7983-qcmq
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
BDU:2023-07905
Уязвимость системы управления базами данных PostgreSQL, связанная с отсутствием защиты служебных данных в вызовах функций с агрегацией, позволяющая нарушителю раскрыть защищаемую информацию
SUSE-SU-2024:0106-1
Security update for postgresql, postgresql15, postgresql16
SUSE-SU-2023:4495-1
Security update for postgresql, postgresql15, postgresql16
SUSE-SU-2023:4479-1
Security update for postgresql14
SUSE-SU-2023:4455-1
Security update for postgresql13
SUSE-SU-2023:4454-1
Security update for postgresql12
SUSE-SU-2023:4434-1
Security update for postgresql13
SUSE-SU-2023:4433-1
Security update for postgresql12
SUSE-SU-2023:4425-1
Security update for postgresql, postgresql15, postgresql16
SUSE-SU-2023:4418-1
Security update for postgresql14
RLSA-2023:7714
Important: postgresql:12 security update
RLSA-2023:7581
Important: postgresql:13 security update
ELSA-2023-7784
ELSA-2023-7784: postgresql security update (IMPORTANT)
ELSA-2023-7714
ELSA-2023-7714: postgresql:12 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-5868 A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory. | CVSS3: 4.3 | 3% Низкий | почти 3 года назад |
 | CVE-2023-5868 A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory. | CVSS3: 4.3 | 3% Низкий | почти 3 года назад |
 | CVE-2023-5868 A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory. | CVSS3: 4.3 | 3% Низкий | почти 3 года назад |
 | CVE-2023-5868 Postgresql: memory disclosure in aggregate function calls | CVSS3: 4.3 | 3% Низкий | почти 3 года назад |
| CVE-2023-5868 A memory disclosure vulnerability was found in PostgreSQL that allows ... | CVSS3: 4.3 | 3% Низкий | почти 3 года назад |
| GHSA-3f9w-7983-qcmq A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory. | CVSS3: 4.3 | 3% Низкий | почти 3 года назад |
 | BDU:2023-07905 Уязвимость системы управления базами данных PostgreSQL, связанная с отсутствием защиты служебных данных в вызовах функций с агрегацией, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 4.3 | 3% Низкий | почти 3 года назад |
 | SUSE-SU-2024:0106-1 Security update for postgresql, postgresql15, postgresql16 | больше 2 лет назад | ||
| SUSE-SU-2023:4495-1 Security update for postgresql, postgresql15, postgresql16 | почти 3 года назад | ||
| SUSE-SU-2023:4479-1 Security update for postgresql14 | почти 3 года назад | ||
| SUSE-SU-2023:4455-1 Security update for postgresql13 | почти 3 года назад | ||
| SUSE-SU-2023:4454-1 Security update for postgresql12 | почти 3 года назад | ||
| SUSE-SU-2023:4434-1 Security update for postgresql13 | почти 3 года назад | ||
| SUSE-SU-2023:4433-1 Security update for postgresql12 | почти 3 года назад | ||
| SUSE-SU-2023:4425-1 Security update for postgresql, postgresql15, postgresql16 | почти 3 года назад | ||
| SUSE-SU-2023:4418-1 Security update for postgresql14 | почти 3 года назад | ||
 | RLSA-2023:7714 Important: postgresql:12 security update | больше 2 лет назад | ||
| RLSA-2023:7581 Important: postgresql:13 security update | почти 3 года назад | ||
| ELSA-2023-7784 ELSA-2023-7784: postgresql security update (IMPORTANT) | больше 2 лет назад | ||
| ELSA-2023-7714 ELSA-2023-7714: postgresql:12 security update (IMPORTANT) | больше 2 лет назад |
Уязвимостей на страницу