The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1555 advisory.

    This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.6. It addresses 63 CVEs:
    CVE-2026-6477, CVE-2017-15097, CVE-2026-14664, CVE-2026-6473, CVE-2012-3489, and 58 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1475 advisory.

    [8.4.18-1]
    - Update to PostgreSQL 8.4.18, for various fixes described at       http://www.postgresql.org/docs/8.4/static/release-8-4-14.html       http://www.postgresql.org/docs/8.4/static/release-8-4-15.html       http://www.postgresql.org/docs/8.4/static/release-8-4-16.html       http://www.postgresql.org/docs/8.4/static/release-8-4-17.html       http://www.postgresql.org/docs/8.4/static/release-8-4-18.html       including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

postgresql was updated to version 9.1.9 (bnc#812525) :

  - CVE-2013-1899: Fix insecure parsing of server     command-line switches. A connection request containing a     database name that begins with '-' could be crafted to     damage or destroy files within the server's data     directory, even if the request is eventually rejected.

  - CVE-2013-1900: Reset OpenSSL randomness state in each     postmaster child process. This avoids a scenario wherein     random numbers generated by 'contrib/pgcrypto' functions     might be relatively easy for another database user to     guess. The risk is only significant when the postmaster     is configured with ssl = on but most connections don't     use SSL encryption.

  - CVE-2013-1901: Make REPLICATION privilege checks test     current user not authenticated user. An unprivileged     database user could exploit this mistake to call     pg_start_backup() or pg_stop_backup(), thus possibly     interfering with creation of routine backups.

  - See the release notes for the rest of the changes:
    http://www.postgresql.org/docs/9.1/static/release-9-1-9.
    html /usr/share/doc/packages/postgresql91/HISTORY

- Update to PostgreSQL 9.2.4, for various fixes described     at     http://www.postgresql.org/docs/9.2/static/release-9-2-4.
    html including the fixes for CVE-2013-1899,     CVE-2013-1900, CVE-2013-1901

  - fix build for aarch64 and ppc64p7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
353622	Rocky Linux 9.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1555)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
70692	Oracle Linux 5 / 6 : postgresql / and / postgresql84 (ELSA-2013-1475)	Nessus	Oracle Linux Local Security Checks	2013/10/30	2024/10/23	high
74963	openSUSE Security Update : postgresql91 (openSUSE-SU-2013:0627-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
66168	Fedora 19 : postgresql-9.2.4-1.fc19 (2013-6148)	Nessus	Fedora Local Security Checks	2013/4/22	2021/1/11	high

偵測

搜尋 Plugin

high

high

high

high