The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2394 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: rh-postgresql12-postgresql (12.7).

    Security Fix(es):

    * postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)

    * postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)

    * postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)

    * postgresql: Partition constraint violation errors leak values of denied columns (CVE-2021-3393)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2372 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: postgresql (12.7)

    Security Fix(es):

    * postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)

    * postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)

    * postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)

    * postgresql: Partition constraint violation errors leak values of denied columns (CVE-2021-3393)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2021:2389 公告中提及的多個弱點影響。

  - postgresql：磁碟分割限制違規錯誤會洩漏被拒絕欄的值 (CVE-2021-3393)

  - postgresql：陣列下標計算中的整數溢位問題造成緩衝區滿溢 (CVE-2021-32027)

  - postgresql：INSERT 中發生記憶體洩漏… ON CONFLICT ... DO UPDATE 中的記憶體洩漏問題 (CVE-2021-32028)

  - postgresql：磁碟分割表 UPDATE 中發生記憶體洩漏… RETURNING 中的記憶體洩漏問題 (CVE-2021-32029)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2021: 2394 公告中提及的多個弱點影響。

  - postgresql：陣列下標計算中的整數溢位問題造成緩衝區滿溢 (CVE-2021-32027)

  - postgresql：INSERT... ON CONFLICT ... DO UPDATE 中的記憶體洩漏問題 (CVE-2021-32028)

  - postgresql：磁碟分割表 UPDATE ... RETURNING 中的記憶體洩漏問題 (CVE-2021-32029)

  - postgresql：磁碟分割限制違規錯誤會洩漏被拒絕欄的值 (CVE-2021-3393)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2021: 2372 公告中提及的多個弱點影響。

  - postgresql：陣列下標計算中的整數溢位問題造成緩衝區滿溢 (CVE-2021-32027)

  - postgresql：INSERT... ON CONFLICT ... DO UPDATE 中的記憶體洩漏問題 (CVE-2021-32028)

  - postgresql：磁碟分割表 UPDATE ... RETURNING 中的記憶體洩漏問題 (CVE-2021-32029)

  - postgresql：磁碟分割限制違規錯誤會洩漏被拒絕欄的值 (CVE-2021-3393)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名稱	產品	系列	已發布	已更新	嚴重性
150790	RHEL 7 : rh-postgresql12-postgresql (RHSA-2021:2394)	Nessus	Red Hat Local Security Checks	2021/6/15	2024/11/7	high
150815	RHEL 8 : postgresql:12 (RHSA-2021:2372)	Nessus	Red Hat Local Security Checks	2021/6/16	2024/11/8	high
150759	RHEL 8：postgresql:12 (RHSA-2021:2389)	Nessus	Red Hat Local Security Checks	2021/6/14	2024/11/7	high
150790	RHEL 7：rh-postgresql12-postgresql (RHSA-2021: 2394)	Nessus	Red Hat Local Security Checks	2021/6/15	2024/11/7	high
150815	RHEL 8：postgresql：12 (RHSA-2021: 2372)	Nessus	Red Hat Local Security Checks	2021/6/16	2024/11/8	high

偵測

搜尋 Plugin

high

high

high

high

high