Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2024.0301
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2024-0301)
Zusammenfassung:	The remote host is missing an update for the 'postgresql13, postgresql15' package(s) announced via the MGASA-2024-0301 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'postgresql13, postgresql15' package(s) announced via the MGASA-2024-0301 advisory. Vulnerability Insight: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. (CVE-2024-7348) Affected Software/OS: 'postgresql13, postgresql15' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2024-7348
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.