リモートの SUSE Linux SLES15/SLES_SAP15 ホストには、SUSE-SU-2025:01748-2 のアドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

    15.13 にアップグレードしてください。

     - CVE-2025-4207PostgreSQL GB18030 エンコーディング検証で、検証に失敗したテキストに対して、割り当ての終端を 1 バイト超えて読み取る可能性がありますbsc#1242931

    変更ログ:

    https://www.postgresql.org/docs/release/15.13/

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモート Redhat Enterprise Linux 10 ホストに、RHSA-2025:14826 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

    PostgreSQL は、高度なオブジェクトリレーショナルデータベース管理システム (DBMS) です。基本の postgresql パッケージには、PostgreSQL DBMS サーバーにアクセスするために必要なクライアントプログラムと、システム全体の HTML ドキュメントが含まれています。これらのクライアントプログラムは、PostgreSQL サーバーと同じマシン上、または、ネットワーク接続により PostgreSQL サーバーにアクセスするリモートマシン上にも配置できます。
    PostgreSQL サーバーは、postgresql-server サブパッケージに含まれています。

    セキュリティ修正プログラム：

    * postgresql: PostgreSQL が復元操作で任意のコードを実行する (CVE-2025-8715)

    * postgresql: PostgreSQL の復元操作における任意のコード実行 (CVE-2025-8714)

    影響、CVSS スコア、謝辞、その他の関連情報を含むセキュリティ問題の詳細については、「参照」セクションに記載されている CVE のページを参照してください。

Tenable は、前述の記述ブロックを Red Hat Enterprise Linux セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモート Redhat Enterprise Linux 9 ホストに、RHSA-2025:14862 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

    PostgreSQL は、高度なオブジェクトリレーショナルデータベース管理システム (DBMS) です。

    セキュリティ修正プログラム：

    * postgresql: PostgreSQL が復元操作で任意のコードを実行する (CVE-2025-8715)

    * postgresql: PostgreSQL の復元操作における任意のコード実行 (CVE-2025-8714)

    影響、CVSS スコア、謝辞、その他の関連情報を含むセキュリティ問題の詳細については、「参照」セクションに記載されている CVE のページを参照してください。

Tenable は、前述の記述ブロックを Red Hat Enterprise Linux セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01786-2 advisory.

    Upgrade to 14.18:

     - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation     for text that fails validation (bsc#1242931)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14827 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)

    * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15022 advisory.

    * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715)
      * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4159 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4159-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/             Carlos Henrique Lima Melara     May 09, 2025                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : postgresql-13     Version        : 13.21-0+deb11u1     CVE ID         : CVE-2025-4207     Debian Bug     :

    A security issue was discovered in the PostgreSQL database system. Under     certain conditions, the server or applications using libpq can crash causing a     Denial of Service.

    For Debian 11 bullseye, this problem has been fixed in version     13.21-0+deb11u1.

    We recommend that you upgrade your postgresql-13 packages.

    For the detailed security status of postgresql-13 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/postgresql-13

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01654-1 advisory.

    Upgrade to 13.21:

     - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation     for text that fails validation (bsc#1242931)

    Changelog:

    https://www.postgresql.org/docs/release/13.21/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01661-2 advisory.

    Upgrade to 14.18:

     - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation     for text that fails validation (bsc#1242931)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01749-1 advisory.

    Upgrade to 15.13:

     - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation     for text that fails validation (bsc#1242931)

    Changelog:

    https://www.postgresql.org/docs/release/15.13/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01750-1 advisory.

    Upgrade to 13.21:

     - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation     for text that fails validation (bsc#1242931)

    Changelog:

    https://www.postgresql.org/docs/release/13.21/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01783-1 advisory.

    Upgrade to 17.5:

     - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation     for text that fails validation (bsc#1242931)

    Changelog:

    https://www.postgresql.org/docs/release/17.5/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-975 advisory.

    Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve     temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This     affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and     13.21 are affected. (CVE-2025-4207)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-973 advisory.

    Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve     temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This     affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and     13.21 are affected. (CVE-2025-4207)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01766-2 advisory.

    Upgrade to 16.9:

     - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation     for text that fails validation (bsc#1242931)

    Changelog:

    https://www.postgresql.org/docs/release/16.9/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
240845	SUSE SLES15 セキュリティ更新 : postgresql15 (SUSE-SU-2025:01748-2)	Nessus	SuSE Local Security Checks	2025/6/27	2025/6/27	medium
260040	RHEL 10 : postgresql16 (RHSA-2025:14826)	Nessus	Red Hat Local Security Checks	2025/8/31	2025/10/9	high
260052	RHEL 9 : postgresql:15 (RHSA-2025:14862)	Nessus	Red Hat Local Security Checks	2025/8/31	2025/10/9	high
249094	SUSE SLES15 Security Update : postgresql14 (SUSE-SU-2025:01786-2)	Nessus	SuSE Local Security Checks	2025/8/12	2025/8/12	medium
260041	RHEL 9 : postgresql:16 (RHSA-2025:14827)	Nessus	Red Hat Local Security Checks	2025/8/31	2025/10/9	high
266137	AlmaLinux 8 : postgresql:15 (ALSA-2025:15022)	Nessus	Alma Linux Local Security Checks	2025/9/29	2025/9/29	high
235668	Debian dla-4159 : libecpg-compat3 - security update	Nessus	Debian Local Security Checks	2025/5/9	2025/5/9	medium
237164	openSUSE 15 Security Update : postgresql13 (SUSE-SU-2025:01654-1)	Nessus	SuSE Local Security Checks	2025/5/23	2025/5/23	medium
237286	SUSE SLES15 Security Update : postgresql14 (SUSE-SU-2025:01661-2)	Nessus	SuSE Local Security Checks	2025/5/27	2025/5/27	medium
237561	SUSE SLES12 Security Update : postgresql15 (SUSE-SU-2025:01749-1)	Nessus	SuSE Local Security Checks	2025/5/30	2025/5/30	medium
237562	SUSE SLES12 Security Update : postgresql13 (SUSE-SU-2025:01750-1)	Nessus	SuSE Local Security Checks	2025/5/30	2025/5/30	medium
237597	SUSE SLES15 Security Update : postgresql17 (SUSE-SU-2025:01783-1)	Nessus	SuSE Local Security Checks	2025/5/31	2025/5/31	medium
237668	Amazon Linux 2023 : postgresql17, postgresql17-contrib, postgresql17-llvmjit (ALAS2023-2025-975)	Nessus	Amazon Linux Local Security Checks	2025/6/2	2025/6/2	medium
237680	Amazon Linux 2023 : postgresql16, postgresql16-contrib, postgresql16-llvmjit (ALAS2023-2025-973)	Nessus	Amazon Linux Local Security Checks	2025/6/2	2025/6/2	medium
237787	SUSE SLES15 Security Update : postgresql16 (SUSE-SU-2025:01766-2)	Nessus	SuSE Local Security Checks	2025/6/5	2025/6/5	medium

检测

插件搜索

medium

high

high

medium

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium