WID-SEC-W-2022-1383

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

PostgreSQL: Mehrere Schwachstellen

view advisory published 2020-11-12

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2020-25696UShigh7.5—
A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive…
CVE-2020-25695UShigh8.8—
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary…
CVE-2020-25694UShigh8.1OT elevated—
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional datab…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan