ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2024.0301
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2024-0301)
Resumen:	The remote host is missing an update for the 'postgresql13, postgresql15' package(s) announced via the MGASA-2024-0301 advisory.
Descripción:	Summary: The remote host is missing an update for the 'postgresql13, postgresql15' package(s) announced via the MGASA-2024-0301 advisory. Vulnerability Insight: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. (CVE-2024-7348) Affected Software/OS: 'postgresql13, postgresql15' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-7348
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.