The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1513:01 advisory.

    postgresql: Reconnection can downgrade connection security settings     (CVE-2020-25694)         postgresql: Multiple features escape security restricted operation sandbox     (CVE-2020-25695)         postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER     execution (CVE-2019-10208)         postgresql: Uncontrolled search path element in CREATE EXTENSION     (CVE-2020-14350)         postgresql: psql's \gset allows overwriting specially treated variables     (CVE-2020-25696)         postgresql: Selectivity estimators bypass row security policies     (CVE-2019-10130)         postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks     (CVE-2020-1720)     CVE(s):
    CVE-2019-10130     CVE-2019-10208     CVE-2020-1720     CVE-2020-14350     CVE-2020-25694     CVE-2020-25695     CVE-2020-25696     Modularity name: postgresql     Stream name: 9.6

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5661 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: postgresql (9.6.20).

    Security Fix(es):

    * postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

    * postgresql: Multiple features escape security restricted operation sandbox (CVE-2020-25695)

    * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

    * postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

    * postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

    * postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)

    * postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-56191 advisory.

    [9.6.20-1]
    - Rebase to upstream release 9.6.20       Resolves: rhbz#1901563       Resolves: rhbz#1898218       Resolves: rhbz#1898334

    [9.6.19-1]
    - Rebase to 9.6.19       Also fixes: CVE-2019-10208, CVE-2020-14350, CVE-2019-10130       Resolves: #1741490       Resolves: #1867111       Resolves: #1845074

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9290 advisory.

    - Rebase to upstream release 10.15       Resolves: CVE-2020-25695       Resolves: CVE-2020-25694       Resolves: CVE-2020-25696

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5664 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: postgresql (10.15).

    Security Fix(es):

    * postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

    * postgresql: Multiple features escape security restricted operation sandbox (CVE-2020-25695)

    * postgresql: Stack-based buffer overflow via setting a password (CVE-2019-10164)

    * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

    * postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

    * postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

    * postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

    * postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)

    * postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0166 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: postgresql (10.15).

    Security Fix(es):

    * postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

    * postgresql: Multiple features escape security restricted operation sandbox (CVE-2020-25695)

    * postgresql: Stack-based buffer overflow via setting a password (CVE-2019-10164)

    * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

    * postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

    * postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

    * postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

    * postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)

    * postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1512 advisory.

    - Patch fixing BZ#1741488 CVE-2019-10208
    - Patch fixing CVE-2020-25694 BZ#1907894

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of postgresql95 installed on the remote host is prior to 9.5.23-1.81. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1442 advisory.

    PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of     most common values, contain values taken from the column. PostgreSQL does not evaluate row security     policies before consulting those statistics during query planning; an attacker can exploit this to read     the most common values of certain columns. Affected columns are those for which the attacker has SELECT     privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the     attacker. (CVE-2019-10130)

    A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable     SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL     as the owner of the function. (CVE-2019-10208)

    It was found that some PostgreSQL extensions did not use search_path safely in their installation script.
    An attacker with sufficient privileges could use this flaw to trick an administrator into executing a     specially crafted script, during the installation or update of such extension. This affects PostgreSQL     versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23. (CVE-2020-14350)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0167 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: postgresql (9.6.20).

    Security Fix(es):

    * postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

    * postgresql: Multiple features escape security restricted operation sandbox (CVE-2020-25695)

    * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

    * postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

    * postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

    * postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)

    * postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for postgresql10 fixes the following issues :

Security issue fixed :

CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release 11.5

Per release notes:
https://www.postgresql.org/docs/11/release-11-5.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A issue has been discovered in the PostgreSQL database system, which could result in privilege escalation.

For additional information please refer to the upstream announcement at https://www.postgresql.org/about/news/1960/

The version of PostgreSQL installed on the remote host is 9.4.x prior to 9.4.24, 9.5.x prior to 9.5.19, 9.6.x prior to 9.6.15, 10.x prior to 10.10, or 11.x prior to 11.5. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified vulnerability that allows an attacker to execute arbitrary     SQL as the function's owner. (CVE-2019-10208)

  - An insecure password handling vulnerability exists in the     EnterpriseDB Windows intstaller due to use of a temporary file.
    An attack can exploit this to read the PostgreSQL superuser     password from the file. (CVE-2019-10210)

  - An arbitrary code execution vulnerability exists in libeay32.dll     due to use of a hard-coded configuration directory. An attacker     can exploit this to load and execute arbitrary code as the user     running a PostgreSQL server or client. (CVE-2019-10211)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3669 advisory.

    [10.14-1]
    - Rebase to upstream release 10.14       Fixes RHBZ#1727803       Fixes RHBZ#1741489       Fixes RHBZ#1709196

    [10.13-1]
    - Rebase to upstream release 10.13       Fixes RHBZ#1727803       Fixes RHBZ#1741489       Fixes RHBZ#1709196

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3669 advisory.

  - postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)

  - postgresql: Stack-based buffer overflow via setting a password (CVE-2019-10164)

  - postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

  - postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

  - postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

  - postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
294358	MiracleLinux 8 : postgresql:9.6 (AXSA:2021-1513:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
144560	RHEL 8 : postgresql:9.6 (RHSA-2020:5661)	Nessus	Red Hat Local Security Checks	2020/12/22	2024/11/7	high
144565	Oracle Linux 8 : ELSA-2020-5619-1: / postgresql:9.6 (ELSA-2020-56191)	Nessus	Oracle Linux Local Security Checks	2020/12/23	2024/10/22	high
150722	Oracle Linux 7 : rh-postgresql10-postgresql (ELSA-2021-9290)	Nessus	Oracle Linux Local Security Checks	2021/6/11	2024/10/22	high
144559	RHEL 8 : postgresql:10 (RHSA-2020:5664)	Nessus	Red Hat Local Security Checks	2020/12/22	2024/11/7	high
145243	RHEL 8 : postgresql:10 (RHSA-2021:0166)	Nessus	Red Hat Local Security Checks	2021/1/21	2024/11/7	high
149316	Oracle Linux 7 : postgresql (ELSA-2021-1512)	Nessus	Oracle Linux Local Security Checks	2021/5/6	2024/11/2	high
141944	Amazon Linux AMI : postgresql95 (ALAS-2020-1442)	Nessus	Amazon Linux Local Security Checks	2020/10/27	2024/12/11	high
145227	RHEL 8 : postgresql:9.6 (RHSA-2021:0167)	Nessus	Red Hat Local Security Checks	2021/1/20	2024/11/7	high
130051	SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2019:2707-1)	Nessus	SuSE Local Security Checks	2019/10/18	2024/4/17	high
127939	Fedora 30 : libpq / postgresql (2019-986fce48b4)	Nessus	Fedora Local Security Checks	2019/8/20	2024/5/2	critical
127488	Debian DSA-4492-1 : postgresql-9.6 - security update	Nessus	Debian Local Security Checks	2019/8/12	2020/8/21	high
127905	PostgreSQL 9.4.x < 9.4.24 / 9.5.x < 9.5.19 / 9.6.x < 9.6.15 / 10.x < 10.10 / 11.x < 11.5 Multiple Vulnerabilities	Nessus	Databases	2019/8/16	2026/10/7	critical
140486	Oracle Linux 8 : postgresql:10 (ELSA-2020-3669)	Nessus	Oracle Linux Local Security Checks	2020/9/10	2024/10/22	high
145882	CentOS 8 : postgresql:10 (CESA-2020:3669)	Nessus	CentOS Local Security Checks	2021/2/1	2024/1/24	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

critical

high

critical

high

high