Test Kennung:	1.3.6.1.4.1.25623.1.0.152847
Kategorie:	Databases
Titel:	PostgreSQL TOCTOU Vulnerability (Aug 2024) - Linux
Zusammenfassung:	PostgreSQL is prone to a time-of-check time-of-use (TOCTOU); race condition vulnerability in pg_dump.
Beschreibung:	Summary: PostgreSQL is prone to a time-of-check time-of-use (TOCTOU) race condition vulnerability in pg_dump. Vulnerability Insight: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Affected Software/OS: PostgreSQL version 12.x prior to 12.20, 13.x prior to 13.16, 14.x prior to 14.13, 15.x prior to 15.8 and 16.x prior to 16.4. Solution: Update to version 12.20, 13.16, 14.13, 15.8, 16.4 or later. CVSS Score: 7.1 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2024-7348
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.