Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.882328
Kategorie:CentOS Local Security Checks
Titel:CentOS: Security Advisory for postgresql (CESA-2015:2081)
Zusammenfassung:The remote host is missing an update for the 'postgresql'; package(s) announced via the CESA-2015:2081 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'postgresql'
package(s) announced via the CESA-2015:2081 advisory.

Vulnerability Insight:
PostgreSQL is an advanced object-relational
database management system (DBMS).

A memory leak error was discovered in the crypt() function of the pgCrypto
extension. An authenticated attacker could possibly use this flaw to
disclose a limited amount of the server memory. (CVE-2015-5288)

All PostgreSQL users are advised to upgrade to these updated packages,
which contain a backported patch to correct this issue. If the postgresql
service is running, it will be automatically restarted after installing
this update.

Affected Software/OS:
'postgresql' package(s) on CentOS 6.

Solution:
Please install the updated package(s).

CVSS Score:
6.4

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2015-5288
BugTraq ID: 77049
http://www.securityfocus.com/bid/77049
Debian Security Information: DSA-3374 (Google Search)
http://www.debian.org/security/2015/dsa-3374
Debian Security Information: DSA-3475 (Google Search)
http://www.debian.org/security/2016/dsa-3475
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172316.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169094.html
https://security.gentoo.org/glsa/201701-33
http://www.securitytracker.com/id/1033775
SuSE Security Announcement: SUSE-SU-2016:0677 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html
SuSE Security Announcement: openSUSE-SU-2015:1907 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-11/msg00033.html
SuSE Security Announcement: openSUSE-SU-2015:1919 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-11/msg00040.html
http://www.ubuntu.com/usn/USN-2772-1
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.