There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing
    an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a
    partitioned table. (CVE-2018-1052)

  - In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x
    before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g`
    under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally
    used for other temporary files. This can allow an authenticated attacker to read or modify the one file,
    which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory
    mode blocks the attacker searching the current working directory or if the prevailing umask blocks the
    attacker opening the file. (CVE-2018-1053)

远程主机上安装的 PostgreSQL 版本为低于 9.3.21 的 9.3.x、低于 9.4.16 的 9.4.x、低于 9.5.11 的 9.5.x、低于 9.6.7 的 9.6.x 或低于 10.2 的 10.x。因此该软件受到多个漏洞的影响。

遠端主機上安裝的 PostgreSQL 版本是 9.3.21 之前的 9.3.x 版、9.4.16 之前的 9.4.x 版、9.5.11 之前的 9.5.x 版、9.6.7 之前的 9.6.x 版或 10.2 之前的 10.x 版。因此，它受到多個弱點影響。

PostgreSQLプロジェクトによる報告: 

- CVE-2018-1052:複数の式を含むパーティションキーの処理を修正します（PostgreSQL-10.xのみ）

- CVE-2018-1053:「pg_upgrade」で作成されたすべての一時ファイルを誰でも読み取り可能にしません

リモートホストにインストールされているPostgreSQLのバージョンは、9.3.21より前の9.3.x、9.4.16より前の9.4.x、9.5.11より前の9.5.x、9.6.7より前の9.6.x、または10.2より前の10.xです。したがって、複数の脆弱性の影響を受けます。

The version of PostgreSQL installed on the remote host is 9.3.x prior to 9.3.21, 9.4.x prior to 9.4.16, 9.5.x prior to 9.5.11, 9.6.x prior to 9.6.7, or 10.x prior to 10.2. It is, therefore, affected by multiple vulnerabilities.

An update of the postgresql package has been released.

The PostgreSQL project reports :

- CVE-2018-1052: Fix the processing of partition keys containing multiple expressions (only for PostgreSQL-10.x)

- CVE-2018-1053: Ensure that all temporary files made with 'pg_upgrade' are non-world-readable

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
425678	Alpine: multiple postgresql15 packages: security update to 10.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/15	2026/7/2	high
425678	Alpine: multiple postgresql15 packages: security update to 10.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/15	2026/7/2	high
406454	Alpine: postgresql: security update to 10.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
425710	Alpine: postgresql14: security update to 10.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/18	2026/7/2	high
406454	Alpine: postgresql: security update to 10.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
425710	Alpine: postgresql14: security update to 10.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/18	2026/7/2	high
106842	PostgreSQL 9.3.x < 9.3.21 / 9.4.x < 9.4.16 / 9.5.x < 9.5.11 / 9.6.x < 9.6.7 / 10.x < 10.2 多个漏洞	Nessus	Databases	2018/2/15	2025/10/29	high
106842	PostgreSQL 9.3.x < 9.3.21 / 9.4.x < 9.4.16 / 9.5.x < 9.5.11 / 9.6.x < 9.6.7 / 10.x < 10.2 多個弱點	Nessus	Databases	2018/2/15	2025/10/29	high
106701	FreeBSD：PostgreSQLの脆弱性（c602c791-0cf4-11e8-a2ec-6cc21735f730）	Nessus	FreeBSD Local Security Checks	2018/2/9	2025/10/30	high
106842	PostgreSQL 9.3.x < 9.3.21/9.4.x < 9.4.16/9.5.x < 9.5.11/9.6.x < 9.6.7/10.x < 10.2の複数の脆弱性	Nessus	Databases	2018/2/15	2025/10/29	high
106842	PostgreSQL 9.3.x < 9.3.21 / 9.4.x < 9.4.16 / 9.5.x < 9.5.11 / 9.6.x < 9.6.7 / 10.x < 10.2 Multiple Vulnerabilities	Nessus	Databases	2018/2/15	2025/10/29	high
121919	Photon OS 2.0: Postgresql PHSA-2018-2.0-0016	Nessus	PhotonOS Local Security Checks	2019/2/7	2025/3/20	high
106701	FreeBSD : PostgreSQL vulnerabilities (c602c791-0cf4-11e8-a2ec-6cc21735f730)	Nessus	FreeBSD Local Security Checks	2018/2/9	2025/10/30	high
121809	Photon OS 1.0: Postgresql PHSA-2018-1.0-0108	Nessus	PhotonOS Local Security Checks	2019/2/7	2025/3/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high