The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4013-1 advisory.

    - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands     (bsc#1275046).
    - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044).
    - CVE-2026-6470: failure to check type `USAGE` privilege (bsc#1275043).
    - CVE-2026-6471: logical decoding can `dlopen` arbitrary file (bsc#1275042).
    - CVE-2026-14662: `tsvector` and `tsquery` undersize allocations, via integer wraparound (bsc#1275001).
    - CVE-2026-14663: `pgcrypto`, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from     cleartext       (bsc#1275002).
    - CVE-2026-14664: `regexp` heap buffer overflow executes arbitrary code (bsc#1275068).
    - CVE-2026-14666: row security caching disregards role modifications (bsc#1275067).
    - CVE-2026-14668: `ctid` type confusion in selectivity estimator discloses derivative of arbitrary read       (bsc#1275066).
    - CVE-2026-14669: `to_char` heap buffer overflow executes arbitrary code (bsc#1275065).
    - CVE-2026-14670: `plperl` tied object heap buffer overflow executes arbitrary code (bsc#1275064).
    - CVE-2026-14671: `refint` plan cache type confusion executes arbitrary code (bsc#1275063).
    - CVE-2026-14672:  observable response discrepancy with non-default `scram_iterations` provides user     existence       oracle (bsc#1275062).
    - CVE-2026-14677: 32-bit `pltcl` and `plperl` undersize allocations, via integer wraparound (bsc#1275059).
    - CVE-2026-14678: `pg_trgm` `picksplit` reads past end of buffer (bsc#1275058).
    - CVE-2026-14679: stack buffer overflow in argument match writes `0x0` and `0x1` to server memory     (bsc#1275057).
    - CVE-2026-14680: type confusion via 'internal' arguments (bsc#1275056).
    - CVE-2026-14681: improper enforcement of GSSAPI encryption when coupled with SSL (bsc#1275055).
    - CVE-2026-15741: expression deparse allows SQL injection via `EXTRACT` argument (bsc#1275054).
    - CVE-2026-15742: `fuzzystrmatch` writes effectively-arbitrary addresses, via integer wraparound     (bsc#1275053).
    - CVE-2026-16239: type confusion in cursor `CLOSE + DECLARE` executes arbitrary code (bsc#1275051).
    - CVE-2026-16241: ECPG integer underflow can crash the client (bsc#1275050).
    - CVE-2026-18024: `ascii()` function reads past end of buffer (bsc#1275049).
    - CVE-2026-18408: `psql` `\unrestrict` lets superuser of `pg_dump` origin server execute arbitrary code in     `psql`       client (bsc#1275048).
    - CVE-2026-19385: `pg_dump` heap buffer overflow executes arbitrary code (bsc#1275047).

    Changes for postgresql17:

    - Update to version 17.11:
      * https://www.postgresql.org/docs/17/release-17-11.html
      * https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792796702 advisory.

  - Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of     service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the     same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1,     17.7, 16.11, 15.15, 14.20, and 13.23 are affected. (CVE-2025-12817)

  - Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct     observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled     ciphers. If the application accepts encrypted data as input, decryption will succeed even with the wrong     key. This in turn loses the modest protection from the Modification Detection Code (MDC). Affected     functions are pgp_sym_encrypt, pgp_sym_decrypt, pgp_pub_encrypt, pgp_pub_decrypt, pgp_sym_encrypt_bytea,     pgp_sym_decrypt_bytea, pgp_pub_encrypt_bytea, and pgp_pub_decrypt_bytea. Versions before PostgreSQL 18.6,     17.11, 16.15, 15.19, and 14.24 are affected. (CVE-2026-14663)

  - Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership     allows a query to continue using cached row-level security policies after those changes require a     different policy, via plan reuse. Stale policies continue until some other event invalidates the cache or     connection termination ends the session. This permits a user to complete reads and modifications that were     recently permitted but now forbidden. An attacker must tailor an attack to a particular application's     pattern of privilege removal and role-specific row security policies. Versions before PostgreSQL 18.6,     17.11, 16.15, 15.19, and 14.24 are affected. (CVE-2026-14666)

  - Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This     might allow a table maintainer to infer limited memory values, via the lossy signal of index split     choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. (CVE-2026-14678)

  - Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end     of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006     fixed, though this instance has less impact. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and     14.24 are affected. (CVE-2026-18024)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3793-1 advisory.

    - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands     (bsc#1275046).
    - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044).
    - CVE-2026-6470: failure to check type `USAGE` privilege (bsc#1275043).
    - CVE-2026-6471: logical decoding can `dlopen` arbitrary file (bsc#1275042).
    - CVE-2026-14662: `tsvector` and `tsquery` undersize allocations, via integer wraparound (bsc#1275001).
    - CVE-2026-14663: `pgcrypto`, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from     cleartext       (bsc#1275002).
    - CVE-2026-14664: `regexp` heap buffer overflow executes arbitrary code (bsc#1275068).
    - CVE-2026-14666: row security caching disregards role modifications (bsc#1275067).
    - CVE-2026-14668: `ctid` type confusion in selectivity estimator discloses derivative of arbitrary read       (bsc#1275066).
    - CVE-2026-14669: `to_char` heap buffer overflow executes arbitrary code (bsc#1275065).
    - CVE-2026-14670: `plperl` tied object heap buffer overflow executes arbitrary code (bsc#1275064).
    - CVE-2026-14671: `refint` plan cache type confusion executes arbitrary code (bsc#1275063).
    - CVE-2026-14673: `amcheck` does not clear untrusted search path (bsc#1275061).
    - CVE-2026-14677: 32-bit `pltcl` and `plperl` undersize allocations, via integer wraparound (bsc#1275059).
    - CVE-2026-14678: `pg_trgm` `picksplit` reads past end of buffer (bsc#1275058).
    - CVE-2026-14679: stack buffer overflow in argument match writes `0x0` and `0x1` to server memory     (bsc#1275057).
    - CVE-2026-14680: type confusion via 'internal' arguments (bsc#1275056).
    - CVE-2026-15741: expression deparse allows SQL injection via `EXTRACT` argument (bsc#1275054).
    - CVE-2026-15742: `fuzzystrmatch` writes effectively-arbitrary addresses, via integer wraparound     (bsc#1275053).
    - CVE-2026-16239: type confusion in cursor `CLOSE + DECLARE` executes arbitrary code (bsc#1275051).
    - CVE-2026-16241: ECPG integer underflow can crash the client (bsc#1275050).
    - CVE-2026-18024: `ascii()` function reads past end of buffer (bsc#1275049).
    - CVE-2026-18408: `psql` `\unrestrict` lets superuser of `pg_dump` origin server execute arbitrary code in     `psql`       client (bsc#1275048).
    - CVE-2026-19385: `pg_dump` heap buffer overflow executes arbitrary code (bsc#1275047).

    Changes for postgresql14:

    - Let `llvmjit-devel` require the `llc` and `clang` binaries to fix build of extensions on SLE-16 and     newer.
    - Use LLVM 15 on SLE-15 up to SP5 and LLVM 17 on SP6 and SP7.
    - Update to version 14.24:
      * https://www.postgresql.org/docs/14/release-14-24.html
      * https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21702-1 advisory.

    - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands     (bsc#1275046).
    - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044).
    - CVE-2026-6470: failure to check type `USAGE` privilege (bsc#1275043).
    - CVE-2026-6471: logical decoding can `dlopen` arbitrary file (bsc#1275042).
    - CVE-2026-14662: `tsvector` and `tsquery` undersize allocations, via integer wraparound (bsc#1275001).
    - CVE-2026-14663: `pgcrypto`, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from     cleartext       (bsc#1275002).
    - CVE-2026-14664: `regexp` heap buffer overflow executes arbitrary code (bsc#1275068).
    - CVE-2026-14666: row security caching disregards role modifications (bsc#1275067).
    - CVE-2026-14668: `ctid` type confusion in selectivity estimator discloses derivative of arbitrary read       (bsc#1275066).
    - CVE-2026-14669: `to_char` heap buffer overflow executes arbitrary code (bsc#1275065).
    - CVE-2026-14670: `plperl` tied object heap buffer overflow executes arbitrary code (bsc#1275064).
    - CVE-2026-14671: `refint` plan cache type confusion executes arbitrary code (bsc#1275063).
    - CVE-2026-14672:  observable response discrepancy with non-default `scram_iterations` provides user     existence       oracle (bsc#1275062).
    - CVE-2026-14677: 32-bit `pltcl` and `plperl` undersize allocations, via integer wraparound (bsc#1275059).
    - CVE-2026-14678: `pg_trgm` `picksplit` reads past end of buffer (bsc#1275058).
    - CVE-2026-14679: stack buffer overflow in argument match writes `0x0` and `0x1` to server memory     (bsc#1275057).
    - CVE-2026-14680: type confusion via internal arguments (bsc#1275056).
    - CVE-2026-14681: improper enforcement of GSSAPI encryption when coupled with SSL (bsc#1275055).
    - CVE-2026-15741: expression deparse allows SQL injection via `EXTRACT` argument (bsc#1275054).
    - CVE-2026-15742: `fuzzystrmatch` writes effectively-arbitrary addresses, via integer wraparound     (bsc#1275053).
    - CVE-2026-16239: type confusion in cursor `CLOSE + DECLARE` executes arbitrary code (bsc#1275051).
    - CVE-2026-16241: ECPG integer underflow can crash the client (bsc#1275050).
    - CVE-2026-18024: `ascii()` function reads past end of buffer (bsc#1275049).
    - CVE-2026-18408: `psql` `\unrestrict` lets superuser of `pg_dump` origin server execute arbitrary code in     `psql`       client (bsc#1275048).
    - CVE-2026-19385: `pg_dump` heap buffer overflow executes arbitrary code (bsc#1275047).

    Changes for postgresql17:

    - Let `llvmjit-devel` require the `llc` and `clang` binaries to fix build of extensions on SLE-16 and     newer.
    - Use LLVM 15 on SLE-15 up to SP5 and LLVM 17 on SP6 and SP7.
    - Update to version 17.11:
      * https://www.postgresql.org/docs/17/release-17-11.html
      * https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1564 advisory.

    This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.6. It addresses 39 CVEs:
    CVE-2026-14673, CVE-2026-6477, CVE-2026-14664, CVE-2026-6473, CVE-2026-6472, and 34 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
348473	SUSE SLES15: postgresql17 / postgresql17-contrib / postgresql17-devel / etc (SUSE-SU-2026:4013-1)	Nessus	SuSE Local Security Checks	2026/9/21	2026/9/21	high
371610	Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792796702)	Nessus	Rocky Linux Local Security Checks	2026/10/23	2026/10/25	medium
341013	SUSE SLES12: postgresql14 / postgresql14-contrib / postgresql14-devel / etc (SUSE-SU-2026:3793-1)	Nessus	SuSE Local Security Checks	2026/8/27	2026/8/29	high
342107	openSUSE 16: postgresql17 / postgresql17-contrib / postgresql17-devel / etc (openSUSE-SU-2026:21702-1)	Nessus	SuSE Local Security Checks	2026/9/1	2026/9/1	high
356888	Rocky Linux 9.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1564)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high

检测

插件搜索

high

medium

high

high

high