DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2019-08-08
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen und um die Konfiguration zu manipulieren.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10211US | critical9.8 | — | ||
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory. | ||||
| CVE-2019-10210US | high7.0 | — | ||
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file. | ||||
| CVE-2019-10209US | low2.2 | — | ||
Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan. | ||||
| CVE-2019-10208US | high8.8 | — | ||
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements ca… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2020-5619 vom 2020-12-23external
- Red Hat Security Advisory RHSA-2020:3669 vom 2020-09-08external
- Red Hat Security Advisory RHSA-2020:4295 vom 2020-10-21external
- Red Hat Security Advisory RHSA-2020:5619 vom 2020-12-17external
- Red Hat Security Advisory RHSA-2020:5661 vom 2020-12-22external
- Red Hat Security Advisory RHSA-2020:5664 vom 2020-12-22external
- Red Hat Security Advisory RHSA-2021:0164 vom 2021-01-18external
- Red Hat Security Advisory RHSA-2021:0166 vom 2021-01-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan