The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1738 advisory.

    [13.20-1]
    - Update to 13.20

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:1741 advisory.

    * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding     validation (CVE-2025-1094)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of postgresql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1094 advisory.

  - Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(),     PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to     achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to     use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly,     improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of     command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of     EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.
    (CVE-2025-1094)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0606-1 advisory.

    Upgrade to 13.20:

    - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings     (bsc#1237093).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:1737 advisory.

    * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding     validation (CVE-2025-1094)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1743 advisory.

    * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding     validation (CVE-2025-1094)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7315-1 advisory.

    Stephen Fewer discovered that PostgreSQL incorrectly handled quoting syntax in certain scenarios. A remote     attacker could possibly use this issue to perform SQL injection attacks.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3064 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding     validation (CVE-2025-1094)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the postgresql15 package has been released.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1739 advisory.

    * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding     validation (CVE-2025-1094)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1740 advisory.

    * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding     validation (CVE-2025-1094)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0202 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-1094:
    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(),     PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to     achieve SQL injection in certain usage patterns.  Specifically, SQL injection requires the application to     use the function result to construct input to psql, the PostgreSQL interactive terminal.  Similarly,     improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of     command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of     EUC_TW or MULE_INTERNAL.  Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0168 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-1094:
    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(),     PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to     achieve SQL injection in certain usage patterns.  Specifically, SQL injection requires the application to     use the function result to construct input to psql, the PostgreSQL interactive terminal.  Similarly,     improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of     command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of     EUC_TW or MULE_INTERNAL.  Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0197 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-1094:
    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(),     PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to     achieve SQL injection in certain usage patterns.  Specifically, SQL injection requires the application to     use the function result to construct input to psql, the PostgreSQL interactive terminal.  Similarly,     improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of     command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of     EUC_TW or MULE_INTERNAL.  Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3978 advisory.

    - Resolves CVE-2025-1094: Improper neutralization of quoting syntax in certain

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9698:02 advisory.

    * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding     validation (CVE-2025-1094)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
216597	Oracle Linux 9 : libpq (ELSA-2025-1738)	Nessus	Oracle Linux Local Security Checks	2025/2/21	2025/9/11	high
216619	AlmaLinux 9 : postgresql:15 (ALSA-2025:1741)	Nessus	Alma Linux Local Security Checks	2025/2/21	2025/5/16	high
216630	CBL Mariner 2.0 Security Update: postgresql (CVE-2025-1094)	Nessus	MarinerOS Local Security Checks	2025/2/21	2025/5/16	high
216657	SUSE SLES12 Security Update : postgresql13 (SUSE-SU-2025:0606-1)	Nessus	SuSE Local Security Checks	2025/2/22	2025/5/16	high
216755	AlmaLinux 8 : libpq (ALSA-2025:1737)	Nessus	Alma Linux Local Security Checks	2025/2/25	2025/2/26	high
216860	RockyLinux 9 : postgresql:16 (RLSA-2025:1743)	Nessus	Rocky Linux Local Security Checks	2025/2/26	2025/3/10	high
217105	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : PostgreSQL vulnerability (USN-7315-1)	Nessus	Ubuntu Local Security Checks	2025/3/3	2025/3/4	high
233266	RHEL 8 : postgresql:12 (RHSA-2025:3064)	Nessus	Red Hat Local Security Checks	2025/3/22	2025/6/5	high
233413	Photon OS 5.0: Postgresql15 PHSA-2025-5.0-0490	Nessus	PhotonOS Local Security Checks	2025/3/27	2025/5/16	high
235546	RockyLinux 8 : postgresql:15 (RLSA-2025:1739)	Nessus	Rocky Linux Local Security Checks	2025/5/7	2025/5/7	high
235553	RockyLinux 8 : postgresql:16 (RLSA-2025:1740)	Nessus	Rocky Linux Local Security Checks	2025/5/7	2025/5/7	high
238843	TencentOS Server 3: postgresql:15 (TSSA-2025:0202)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	high
239177	TencentOS Server 4: libpq (TSSA-2025:0168)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
239377	TencentOS Server 3: libpq (TSSA-2025:0197)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
240207	Oracle Linux 7 : postgresql (ELSA-2025-3978)	Nessus	Oracle Linux Local Security Checks	2025/6/20	2025/9/11	high
283389	MiracleLinux 9 : postgresql-13.20-1.el9_5 (AXSA:2025-9698:02)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/13	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high