rh-postgresql12-postgresql-server-syspaths vulnerabilities (Red Hat)

21 vulnerabilities.

• rh-postgresql12-postgresql-server-syspaths Red Hat PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL CVE-2024-0985 Fix available 8.0 HighFebruary 8, 2024
• rh-postgresql12-postgresql-server-syspaths Red Hat Postgresql: role pg_signal_backend can signal certain superuser processes. CVE-2023-5870 Fix available 2.2 LowNovember 10, 2023
• rh-postgresql12-postgresql-server-syspaths Red Hat Postgresql: buffer overrun from integer overflow in array modification CVE-2023-5869 Fix available 8.8 HighNovember 10, 2023
• rh-postgresql12-postgresql-server-syspaths Red Hat Postgresql: memory disclosure in aggregate function calls CVE-2023-5868 Fix available 4.3 MediumNovember 10, 2023
• rh-postgresql12-postgresql-server-syspaths Red Hat Postgresql: extension script @substitutions@ within quoting allow sql injection CVE-2023-39417 Fix available 7.5 HighAugust 11, 2023
• rh-postgresql12-postgresql-server-syspaths Red Hat Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect... CVE-2023-2455 Fix available 5.4 MediumMay 11, 2023
• rh-postgresql12-postgresql-server-syspaths Red Hat schema_element defeats protective search_path changes; It was found that certain database calls... CVE-2023-2454 Fix available 7.2 HighMay 11, 2023
• rh-postgresql12-postgresql-server-syspaths Red Hat A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when... CVE-2022-1552 Fix available EPSS 17.0% 8.8 HighMay 12, 2022
• rh-postgresql12-postgresql-server-syspaths Red Hat A man-in-the-middle attacker can inject false responses to the client's first few queries,... CVE-2021-23222 Fix available 5.9 MediumNovember 11, 2021
• rh-postgresql12-postgresql-server-syspaths Red Hat When the server is configured to use trust authentication with a clientcert requirement or to use... CVE-2021-23214 Fix available 8.1 HighNovember 11, 2021
• rh-postgresql12-postgresql-server-syspaths Red Hat A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory... CVE-2021-3677 Fix available 6.5 MediumAugust 12, 2021
• rh-postgresql12-postgresql-server-syspaths Red Hat A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table,... CVE-2021-32029 Fix available 6.5 MediumMay 13, 2021
• rh-postgresql12-postgresql-server-syspaths Red Hat A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a... CVE-2021-32028 Fix available 6.5 MediumMay 13, 2021
• rh-postgresql12-postgresql-server-syspaths Red Hat A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17... CVE-2021-32027 Fix available 8.8 HighMay 13, 2021
• rh-postgresql12-postgresql-server-syspaths Red Hat Generation of Error Message Containing Sensitive Information in postgresql CVE-2021-3393 Fix available 4.3 MediumFebruary 12, 2021
• rh-postgresql12-postgresql-server-syspaths Red Hat Incorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQL CVE-2020-25696 Fix available 7.5 HighNovember 13, 2020
• rh-postgresql12-postgresql-server-syspaths Red Hat SQL Injection CVE-2020-25695 Fix available EPSS 46.4% 8.8 HighNovember 13, 2020
• rh-postgresql12-postgresql-server-syspaths Red Hat Use of a Broken or Risky Cryptographic Algorithm in PostgreSQL CVE-2020-25694 Fix available 8.1 HighNovember 13, 2020
• rh-postgresql12-postgresql-server-syspaths Red Hat Untrusted Search Path in PostgreSQL CVE-2020-14350 Fix available 7.3 HighAugust 17, 2020
• rh-postgresql12-postgresql-server-syspaths Red Hat It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly... CVE-2020-14349 Fix available 7.1 HighAugust 17, 2020
• rh-postgresql12-postgresql-server-syspaths Red Hat A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub... CVE-2020-1720 Fix available 3.1 LowFebruary 13, 2020