Multiple vulnerabilities in PostgreSQL

Açıklama

Multiple serious vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An unspecified vulnerability in libpq can be exploited remotely to bypass security restrictions;
2. An unspecified vulnerability can be exploited remotely to obtain sensitive information.

---

Technical details

Attacker with “CREATE TABLE” privileges can exploit this to read arbitrary bytes server memory. If the attacker also have “INSERT” and “UPDATE” privileges to a particular table, the can exploit this to update other columns in this table

Orijinal öneriler

• POSTGRESQL 10.5, 9.6.10, 9.5.14, 9.4.19, 9.3.24, AND 11 BETA 3 RELEASED!

İlgili ürünler

• PostgreSQL

CVE Listesi

• CVE-2018-10915
  high
• CVE-2018-10925
  high

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com