Количество 42
Количество 42
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
CVE-2024-10979
PostgreSQL PL/Perl environment variable changes execute arbitrary code
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allow ...
GHSA-2r9h-x757-8j9q
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
ELSA-2024-10882
ELSA-2024-10882: postgresql security update (IMPORTANT)
BDU:2024-09679
Уязвимость переменных среды PL/Perl системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код
RLSA-2024:10832
Important: postgresql:13 security update
RLSA-2024:10831
Important: postgresql:16 security update
RLSA-2024:10830
Important: postgresql:15 security update
RLSA-2024:10788
Important: postgresql:16 security update
RLSA-2024:10787
Important: postgresql:15 security update
RLSA-2024:10785
Important: postgresql:12 security update
ELSA-2024-10832
ELSA-2024-10832: postgresql:13 security update (IMPORTANT)
ELSA-2024-10831
ELSA-2024-10831: postgresql:16 security update (IMPORTANT)
ELSA-2024-10830
ELSA-2024-10830: postgresql:15 security update (IMPORTANT)
ELSA-2024-10791
ELSA-2024-10791: postgresql security update (IMPORTANT)
ELSA-2024-10788
ELSA-2024-10788: postgresql:16 security update (IMPORTANT)
ELSA-2024-10787
ELSA-2024-10787: postgresql:15 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. | CVSS3: 8.8 | 16% Средний | около 1 года назад |
 | CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. | CVSS3: 8.8 | 16% Средний | около 1 года назад |
 | CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. | CVSS3: 8.8 | 16% Средний | около 1 года назад |
 | CVE-2024-10979 PostgreSQL PL/Perl environment variable changes execute arbitrary code | CVSS3: 8.8 | 16% Средний | около 1 года назад |
| CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allow ... | CVSS3: 8.8 | 16% Средний | около 1 года назад |
| GHSA-2r9h-x757-8j9q Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. | CVSS3: 8.8 | 16% Средний | около 1 года назад |
| ELSA-2024-10882 ELSA-2024-10882: postgresql security update (IMPORTANT) | 12 месяцев назад | ||
 | BDU:2024-09679 Уязвимость переменных среды PL/Perl системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 16% Средний | около 1 года назад |
 | RLSA-2024:10832 Important: postgresql:13 security update | около 1 года назад | ||
| RLSA-2024:10831 Important: postgresql:16 security update | около 1 года назад | ||
| RLSA-2024:10830 Important: postgresql:15 security update | около 1 года назад | ||
| RLSA-2024:10788 Important: postgresql:16 security update | около 1 года назад | ||
| RLSA-2024:10787 Important: postgresql:15 security update | около 1 года назад | ||
| RLSA-2024:10785 Important: postgresql:12 security update | около 1 года назад | ||
| ELSA-2024-10832 ELSA-2024-10832: postgresql:13 security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-10831 ELSA-2024-10831: postgresql:16 security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-10830 ELSA-2024-10830: postgresql:15 security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-10791 ELSA-2024-10791: postgresql security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-10788 ELSA-2024-10788: postgresql:16 security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-10787 ELSA-2024-10787: postgresql:15 security update (IMPORTANT) | около 1 года назад |
Уязвимостей на страницу