libpgjava vulnerabilities (Debian)
13 vulnerabilities.
-
libpgjavaDebian pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros) 5.3 Medium -
libpgjavaDebian pgjdbc does not enforce requireAuth when the value excludes every authentication method 5.9 Medium -
libpgjavaDebian pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections 4.2 Medium -
libpgjavaDebian Silent channel-binding authentication downgrade via unsupported certificate algorithms 8.2 High -
libpgjavaDebian pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS 7.5 High -
libpgjavaDebian pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration 8.2 High -
libpgjavaDebian pgjdbc SQL Injection via line comment generation 10.0 Critical -
libpgjavaDebian TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc 4.7 Medium -
libpgjavaDebian SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc 7.1 High -
libpgjavaDebian pgjdbc Arbitrary File Write Vulnerability 9.8 Critical -
libpgjavaDebian Unchecked Class Instantiation when providing Plugin Classes 7.0 High -
libpgjavaDebian Improper Restriction of XML External Entity Reference 7.7 High -
libpgjavaDebian Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate 8.1 High