Multiple vulnerabilities in PostgreSQL

Beschreibung

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. Memory disclosure vulnerability in aggregate function calls can be exploited to obtain sensitive information.
2. Buffer overrun vulnerability in array modification can be exploited to obtain sensitive information.
3. Denial of service vulnerability can be exploited to cause denial of service.

Ursprüngliche Informationshinweise

• PostgreSQL: CVE-2023-5868: Memory disclosure in aggregate function calls

• PostgreSQL: CVE-2023-5869: Buffer overrun from integer overflow in array modification
• PostgreSQL: CVE-2023-5870: Role „pg_cancel_backend“ can signal certain superuser processes

Betroffene Produkte

• PostgreSQL

CVE Liste

• CVE-2023-5868
  warning
• CVE-2023-5869
  critical
• CVE-2023-5870
  warning

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com