DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2024-11-14
Ein entfernter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen preiszugeben.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-10979US | high8.8 | — | ||
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suf… | ||||
| CVE-2024-10978US | medium4.2 | — | ||
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to… | ||||
| CVE-2024-10977US | low3.7OT elevated | — | ||
Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application. For exa… | ||||
| CVE-2024-10976US | medium5.4 | — | ||
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed mos… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-28208 vom 2026-06-26external
- Oracle Linux Security Advisory ELSA-2026-28999 vom 2026-06-26external
- Oracle Linux Security Advisory ELSA-2026-4064 vom 2026-03-11external
- Red Hat Security Advisory RHSA-2024:10593 vom 2024-12-02external
- Red Hat Security Advisory RHSA-2024:10595 vom 2024-12-02external
- Red Hat Security Advisory RHSA-2024:10677 vom 2024-12-02external
- Red Hat Security Advisory RHSA-2024:10705 vom 2024-12-02external
- Red Hat Security Advisory RHSA-2024:10739 vom 2024-12-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan