libpgjava vulnerabilities (Ubuntu)
12 vulnerabilities.
-
libpgjavaUbuntu pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros) 5.3 Medium -
libpgjavaUbuntu pgjdbc does not enforce requireAuth when the value excludes every authentication method 5.9 Medium -
libpgjavaUbuntu pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections 4.2 Medium -
libpgjavaUbuntu Silent channel-binding authentication downgrade via unsupported certificate algorithms 8.2 High -
libpgjavaUbuntu pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS 7.5 High -
libpgjavaUbuntu pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration 8.2 High -
libpgjavaUbuntu pgjdbc SQL Injection via line comment generation 10.0 Critical -
libpgjavaUbuntu TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc 4.7 Medium -
libpgjavaUbuntu SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc 7.1 High -
libpgjavaUbuntu Unchecked Class Instantiation when providing Plugin Classes 7.0 High -
libpgjavaUbuntu Improper Restriction of XML External Entity Reference 7.7 High -
libpgjavaUbuntu Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate 8.1 High