Kaspersky Threats

Solutions for:

Kaspersky ID:

KLA63867

Detect Date:

02/08/2024

Updated:

02/12/2024

Description

Privilege escalation vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to execute arbitrary code, obtain sensitive information, cause denial of service.

Original advisories

CVE-2024-0985: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

CVE list

CVE-2024-0985
warning

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!

Kaspersky ID:

KLA63867

Detect Date:

02/08/2024

Updated:

02/12/2024

Severity

high

Solution

Update to the latest version
Download PostgreSQL

Impacts

ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected products

PostgreSQL 15.x earlier than 15.6
PostgreSQL 13.x earlier than 13.14
PostgreSQL 12.x earlier than 12.18
PostgreSQL 14.x earlier than 14.11

Kaspersky Next

Let’s go Next: redefine your business’s cybersecurity

Learn more

New Kaspersky!

Your digital life deserves complete protection!

Learn more

Confirm changes?

Your message has been sent successfully.

OSI vulnerability in PostgreSQL

Description

Original advisories

Related products

CVE list

Read more