ID de Prueba:	1.3.6.1.4.1.25623.1.0.150850
Categoría:	Databases
Título:	PostgreSQL 11.x < 11.21, 12.x < 12.16, 13.x < 13.12, 14.x < 14.9, 15.x < 15.4 SQLi Vulnerability - Linux
Resumen:	PostgreSQL is prone to an SQL injection (SQLi) vulnerability.
Descripción:	Summary: PostgreSQL is prone to an SQL injection (SQLi) vulnerability. Vulnerability Insight: An extension script is vulnerable if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct. No bundled extension is vulnerable. Affected Software/OS: PostgreSQL versions 11.x prior to 11.21, 12.x prior to 12.16, 13.x prior to 13.12, 14.x prior to 14.9 and 15.x prior to 15.4. Solution: Update to version 11.21, 12.16, 13.12, 14.9, 15.4 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-39417 RHBZ#2228111 https://bugzilla.redhat.com/show_bug.cgi?id=2228111 RHSA-2023:7545 https://access.redhat.com/errata/RHSA-2023:7545 RHSA-2023:7579 https://access.redhat.com/errata/RHSA-2023:7579 RHSA-2023:7580 https://access.redhat.com/errata/RHSA-2023:7580 RHSA-2023:7581 https://access.redhat.com/errata/RHSA-2023:7581 RHSA-2023:7616 https://access.redhat.com/errata/RHSA-2023:7616 RHSA-2023:7656 https://access.redhat.com/errata/RHSA-2023:7656 RHSA-2023:7666 https://access.redhat.com/errata/RHSA-2023:7666 RHSA-2023:7667 https://access.redhat.com/errata/RHSA-2023:7667 RHSA-2023:7694 https://access.redhat.com/errata/RHSA-2023:7694 RHSA-2023:7695 https://access.redhat.com/errata/RHSA-2023:7695 RHSA-2023:7714 https://access.redhat.com/errata/RHSA-2023:7714 RHSA-2023:7770 https://access.redhat.com/errata/RHSA-2023:7770 RHSA-2023:7772 https://access.redhat.com/errata/RHSA-2023:7772 RHSA-2023:7784 https://access.redhat.com/errata/RHSA-2023:7784 RHSA-2023:7785 https://access.redhat.com/errata/RHSA-2023:7785 RHSA-2023:7883 https://access.redhat.com/errata/RHSA-2023:7883 RHSA-2023:7884 https://access.redhat.com/errata/RHSA-2023:7884 RHSA-2023:7885 https://access.redhat.com/errata/RHSA-2023:7885 RHSA-2024:0304 https://access.redhat.com/errata/RHSA-2024:0304 RHSA-2024:0332 https://access.redhat.com/errata/RHSA-2024:0332 RHSA-2024:0337 https://access.redhat.com/errata/RHSA-2024:0337 https://access.redhat.com/security/cve/CVE-2023-39417 https://lists.debian.org/debian-lts-announce/2023/10/msg00003.html https://security.netapp.com/advisory/ntap-20230915-0002/ https://www.debian.org/security/2023/dsa-5553 https://www.debian.org/security/2023/dsa-5554 https://www.postgresql.org/support/security/CVE-2023-39417
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.