DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2023-08-10
Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen oder Sicherheitsmaßnahmen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-39418US | medium4.3OT elevated | — | ||
A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and S… | ||||
| CVE-2023-39417US | high8.8 | — | ||
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, ''… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:7770 vom 2023-12-13external
- Red Hat Security Advisory RHSA-2023:7772 vom 2023-12-13external
- Oracle Linux Security Advisory ELSA-2023-7784 vom 2023-12-15external
- Oracle Linux Security Advisory ELSA-2026-28208 vom 2026-06-26external
- Red Hat Security Advisory RHSA-2023:7545 vom 2023-11-28external
- Red Hat Security Advisory RHSA-2023:7579 vom 2023-11-29external
- Red Hat Security Advisory RHSA-2023:7580 vom 2023-11-29external
- Red Hat Security Advisory RHSA-2023:7581 vom 2023-11-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan