DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2017-11-09
Ein lokaler oder entfernter authenitisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Daten einzusehen, Daten zu manipulieren, einen Denial of Serivce auszulösen oder Sicherheitsmechanismen zu umgehen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-15097US | medium6.7 | — | ||
Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root… | ||||
| CVE-2016-1255US | high7.8 | — | ||
The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS bef… | ||||
| CVE-2017-12172US | medium6.7 | — | ||
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system accou… | ||||
| CVE-2017-15099US | medium6.5 | — | ||
INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to re… | ||||
| CVE-2017-15098US | high8.1 | — | ||
Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x b… | ||||
| CVE-2017-8806US | medium5.5 | — | ||
The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packag… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2017-3402 vom 2017-12-08external
- Red Hat Security Advisory RHSA-2018:2511 vom 2018-08-20external
- Ubuntu Security Notice USN-3479-1 vom 2017-11-14external
- Red Hat Security Advisory RHSA-2017:3402 vom 2017-12-08external
- Red Hat Security Advisory RHSA-2017:3404 vom 2017-12-08external
- Red Hat Security Advisory RHSA-2017:3405 vom 2017-12-08external
- RedHat Security Advisory RHSA-2018:2566external
- Oracle Linux Security Advisory ELSA-2024-10882 vom 2024-12-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan