ID de Prueba:	1.3.6.1.4.1.25623.1.0.152847
Categoría:	Databases
Título:	PostgreSQL TOCTOU Vulnerability (Aug 2024) - Linux
Resumen:	PostgreSQL is prone to a time-of-check time-of-use (TOCTOU); race condition vulnerability in pg_dump.
Descripción:	Summary: PostgreSQL is prone to a time-of-check time-of-use (TOCTOU) race condition vulnerability in pg_dump. Vulnerability Insight: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Affected Software/OS: PostgreSQL version 12.x prior to 12.20, 13.x prior to 13.16, 14.x prior to 14.13, 15.x prior to 15.8 and 16.x prior to 16.4. Solution: Update to version 12.20, 13.16, 14.13, 15.8, 16.4 or later. CVSS Score: 7.1 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-7348
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.