DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2019-05-09
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, vertrauliche Daten einzusehen oder Sicherheitsmechanismen zu umgehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10128US | high7.8 | — | ||
A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not lock down the ACL of the binary installatio… | ||||
| CVE-2019-10127US | high8.8 | — | ||
A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock down the ACL of the binary installation dire… | ||||
| CVE-2019-10130US | medium4.3 | — | ||
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL main… | ||||
| CVE-2019-10129US | medium6.5 | — | ||
A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. I… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2020-5619 vom 2020-12-23external
- Red Hat Security Advisory RHSA-2020:3669 vom 2020-09-08external
- Red Hat Security Advisory RHSA-2020:4295 vom 2020-10-21external
- Red Hat Security Advisory RHSA-2020:5619 vom 2020-12-17external
- Red Hat Security Advisory RHSA-2020:5661 vom 2020-12-22external
- Red Hat Security Advisory RHSA-2020:5664 vom 2020-12-22external
- Red Hat Security Advisory RHSA-2021:0164 vom 2021-01-18external
- Red Hat Security Advisory RHSA-2021:0166 vom 2021-01-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan