Non notée
CVE-2017-7548 PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated…
Description
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| postgresql | Versions non publiées |
Références
- DSA-3936 www.debian.org
- RHSA-2017:2678 access.redhat.com
- DSA-3935 www.debian.org
- 1039142 www.securitytracker.com
- www.postgresql.org www.postgresql.org
- 100276 www.securityfocus.com
- GLSA-201710-06 security.gentoo.org
- RHSA-2017:2677 access.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de postgresql
Les 11 CVE de postgresql →
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change…
8.8
Élevée
CVE-2024-7348
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary…
8.8
Élevée
CVE-2024-24213
Supabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the component…
9.8
Critique
CVE-2019-10211
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL…
7.8
Élevée