このpostgresql95の更新では、以下の問題を修正します：

PostgreSQL 9.5.11への更新：

キャッシュサイドチャネル攻撃の軽減：

  -https://www.postgresql.org/docs/9.5/static/release-9-5-11.html 

  - CVE-2018-1053、boo#1077983：pg_upgradeで作成されたすべての一時ファイルを誰でも読み取れるようにします。 

  - boo#1079757：pg_rewindのcopy_file_range関数の名前を変更し、その名前の新しいLinuxシステムコールとの競合を回避します。

バージョン 9.5.10：

  -https://www.postgresql.org/docs/9.5/static/release-9-5-10.html

  - CVE-2017-15098、boo#1067844：JSON関数のメモリリーク

  - CVE-2017-15099、boo#1067841：INSERT ... ON CONFLICT DO UPDATEはSELECT権限の実行に失敗します

バージョン 9.5.9：

  -https://www.postgresql.org/docs/9.5/static/release-9-5-9.html

  - information_schema.table_privilegesビューで外部テーブルを表示します。

  - 失敗したトランザクションのROLLBACKの実行を試行する際に発生する致命的な終了（例：SIGTERMの受信による）処理をクリーンアップします。

  - 致命的な終了の間にトリガーされる可能性のあるアサーションを削除します。

  - 検索中の複合型またはドメイン型よりも、範囲型またはドメイン型の列を正しく識別します。

  - 並行モードを使用し、リストファイルを使用して復元する項目のサブセットを選択する場合、pg_restoreでのクラッシュを修正します。

  - ecpgパーサーを変更し、C変数が添付されていないRETURNING節を許可します。

バージョン 9.5.8：

  -https://www.postgresql.org/docs/9.5/static/release-9-5-8.html

  - CVE-2017-7547、boo#1051685：pg_user_mappings.umoptionsの可視性をさらに制限し、ユーザーマッピングオプションとして保存されたパスワードを保護します。

  - CVE-2017-7546、boo#1051684：すべてのパスワードベースの認証方法で空のパスワードを許可しません。

  - CVE-2017-7548、boo#1053259：lo_put()関数がACLを無視します。

在 PostgreSQL 資料庫系統中發現數個弱點：- CVE-2017-7546 某些驗證方法會接受空白密碼。- CVE-2017-7547 使用者對應會造成洩漏資料給無權限的使用者。- CVE-2017-7548 lo_put() 函式會忽略 ACL。如需有關安全性弱點的深入說明，請參閱 https://www.postgresql.org/about/news/1772/

pg_user_mappings 檢視可向缺少伺服器權限的使用者洩漏密碼：在 PostgreSQL 處理外部伺服器上 pg_user_mappings 檢視之存取權的方式中，發現授權缺陷。經驗證的遠端攻擊者可能會利用此缺陷，從並沒有實際權限的外部伺服器擁有者定義的使用者對應中取得密碼。(CVE-2017-7547) 在某些驗證方法中接受空白密碼：據發現，儘管 libpq 拒絕傳送空白密碼，還是可以使用空白密碼向 PostgreSQL 資料庫帳戶進行驗證。遠端攻擊者可能會利用此缺陷，使用空白密碼取得資料庫帳戶的存取權。(CVE-2017-7546) lo_put() 函式會忽略 ACL：在 PostgreSQL 處理大型物件的方式中，發現一個授權缺陷。對大型物件沒有權限的經驗證遠端攻擊者可能會利用此缺陷，覆寫物件的整個內容，因而導致拒絕服務。(CVE-2017-7548)

現已提供適用於 Red Hat Enterprise Linux 7 的 postgresql 更新。Red Hat 產品安全性團隊已將此更新評等為具有中等安全性影響。可從〈參照〉一節的 CVE 連結中取得每個弱點之常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。PostgreSQL 是一種進階物件關聯式資料庫管理系統 (DBMS)。下列套件已升級至更新的上游版本：postgresql (9.2.23)。(BZ#1484639、BZ#1484647) 安全性修正：* 據發現，儘管 libpq 拒絕傳送空白密碼，還是可以使用空白密碼向 PostgreSQL 資料庫帳戶進行驗證。遠端攻擊者可能會利用此缺陷，使用空白密碼取得資料庫帳戶的存取權。(CVE-2017-7546) * 在 PostgreSQL 處理外部伺服器上 pg_user_mappings 檢視之存取權的方式中，發現授權缺陷。遠端、經驗證的攻擊者可能會利用此缺陷，從並沒有實際權限的外部伺服器擁有者定義的使用者對應中取得密碼。(CVE-2017-7547) Red Hat 感謝 PostgreSQL 專案報告這些問題。上游確認 Ben de Graaff、Jelte Fennema 和 Jeroen van der Ham 為 CVE-2017-7546 的原始報告者；而 Jeff Janes 為 CVE-2017-7547 的原始報告者。

安全性修正：- 據發現，儘管 libpq 拒絕傳送空白密碼，還是可以使用空白密碼向 PostgreSQL 資料庫帳戶進行驗證。遠端攻擊者可能會利用此缺陷，使用空白密碼取得資料庫帳戶的存取權。(CVE-2017-7546)

執行 MAIN 4.05 版的遠端 NewStart CGSL 主機安裝了受下列弱點影響的 postgresql 套件：- 據發現，儘管 libpq 拒絕傳送空白密碼，還是可以使用空白密碼向 PostgreSQL 資料庫帳戶進行驗證。遠端攻擊者可能會利用此缺陷，使用空白密碼取得資料庫帳戶的存取權。(CVE-2017-7546) 請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

https://www.postgresql.org/docs/9.6/static/release-9-6-4.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

pg_user_mappings view discloses passwords to users lacking server privileges :

An authorization flaw was found in the way PostgreSQL handled access to the pg_user_mappings view on foreign servers. A remote authenticated attacker could potentially use this flaw to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so. (CVE-2017-7547)

Empty password accepted in some authentication methods :

It was found that authenticating to a PostgreSQL database account with an empty password was possible despite libpq's refusal to send an empty password. A remote attacker could potentially use this flaw to gain access to database accounts with empty passwords. (CVE-2017-7546)

The following packages have been upgraded to a later upstream version:
postgresql (9.2.23).

Security Fix(es) :

  - It was found that authenticating to a PostgreSQL     database account with an empty password was possible     despite libpq's refusal to send an empty password. A     remote attacker could potentially use this flaw to gain     access to database accounts with empty passwords.
    (CVE-2017-7546)

  - An authorization flaw was found in the way PostgreSQL     handled access to the pg_user_mappings view on foreign     servers. A remote, authenticated attacker could     potentially use this flaw to retrieve passwords from the     user mappings defined by the foreign server owners     without actually having the privileges to do so.
    (CVE-2017-7547)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2860 advisory.

    [8.4.20-8]
    - backport fix for CVE-2017-7546 (rhbz#1484677)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2860 advisory.

  - postgresql: Empty password accepted in some authentication methods (CVE-2017-7546)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for postgresql is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es) :

* It was found that authenticating to a PostgreSQL database account with an empty password was possible despite libpq's refusal to send an empty password. A remote attacker could potentially use this flaw to gain access to database accounts with empty passwords. (CVE-2017-7546)

Red Hat would like to thank the PostgreSQL project for reporting this issue. Upstream acknowledges Ben de Graaff, Jelte Fennema, and Jeroen van der Ham as the original reporters.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2677 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: rh-postgresql95-postgresql (9.5.9).
    (BZ#1484637, BZ#1484642, BZ#1484648)

    Security Fix(es):

    * It was found that authenticating to a PostgreSQL database account with an empty password was possible     despite libpq's refusal to send an empty password. A remote attacker could potentially use this flaw to     gain access to database accounts with empty passwords. (CVE-2017-7546)

    * An authorization flaw was found in the way PostgreSQL handled access to the pg_user_mappings view on     foreign servers. A remote, authenticated attacker could potentially use this flaw to retrieve passwords     from the user mappings defined by the foreign server owners without actually having the privileges to do     so. (CVE-2017-7547)

    * An authorization flaw was found in the way PostgreSQL handled large objects. A remote, authenticated     attacker with no privileges on a large object could potentially use this flaw to overwrite the entire     content of the object, thus resulting in denial of service. (CVE-2017-7548)

    Red Hat would like to thank the PostgreSQL project for reporting these issues. Upstream acknowledges Ben     de Graaff, Jelte Fennema, and Jeroen van der Ham as the original reporters of CVE-2017-7546; Jeff Janes as     the original reporter of CVE-2017-7547; and Chapman Flack as the original reporter of CVE-2017-7548.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
106965	openSUSEセキュリティ更新プログラム：postgresql95（openSUSE-2018-204）	Nessus	SuSE Local Security Checks	2018/2/23	2021/1/19	critical
102442	Debian DSA-3935-1：postgresql-9.4 - 安全性更新	Nessus	Debian Local Security Checks	2017/8/14	2021/1/4	critical
102443	Debian DSA-3936-1：postgresql-9.6 - 安全性更新	Nessus	Debian Local Security Checks	2017/8/14	2021/1/4	critical
102873	Amazon Linux AMI : postgresql94 / postgresql95 (ALAS-2017-885)	Nessus	Amazon Linux Local Security Checks	2017/9/1	2018/4/18	critical
103209	RHEL 7：postgresql (RHSA-2017:2728)	Nessus	Red Hat Local Security Checks	2017/9/14	2025/4/15	critical
103688	Scientific Linux 安全性更新：SL6.x i386/x86_64 上的 postgresql	Nessus	Scientific Linux Local Security Checks	2017/10/6	2021/1/14	critical
127366	NewStart CGSL MAIN 4.05：postgresql 弱點 (NS-SA-2019-0121)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical
102614	Fedora 26 : mingw-postgresql (2017-f9e66916ec)	Nessus	Fedora Local Security Checks	2017/8/21	2021/1/6	critical
102872	Amazon Linux AMI : postgresql93 / postgresql92 (ALAS-2017-884)	Nessus	Amazon Linux Local Security Checks	2017/9/1	2018/4/18	critical
103244	Scientific Linux Security Update : postgresql on SL7.x x86_64 (20170914)	Nessus	Scientific Linux Local Security Checks	2017/9/15	2021/1/14	critical
103684	Oracle Linux 6 : postgresql (ELSA-2017-2860)	Nessus	Oracle Linux Local Security Checks	2017/10/6	2024/10/22	critical
103686	RHEL 6 : postgresql (RHSA-2017:2860)	Nessus	Red Hat Local Security Checks	2017/10/6	2024/4/24	critical
103706	CentOS 6 : postgresql (CESA-2017:2860)	Nessus	CentOS Local Security Checks	2017/10/9	2021/1/4	critical
210267	RHEL 6 / 7 : rh-postgresql95-postgresql (RHSA-2017:2677)	Nessus	Red Hat Local Security Checks	2024/11/5	2024/11/5	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical