Test ID:	1.3.6.1.4.1.25623.1.0.153447
Category:	Databases
Title:	PostgreSQL Multiple Vulnerabilities (Nov 2024) - Windows
Summary:	PostgreSQL is prone to multiple vulnerabilities.
Description:	Summary: PostgreSQL is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-10976: Row security below e.g. subqueries disregards user ID changes - CVE-2024-10977: libpq retains an error message from man-in-the-middle - CVE-2024-10978: SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID - CVE-2024-10979: PL/Perl environment variable changes execute arbitrary code Affected Software/OS: PostgreSQL version 12.x prior to 12.21, 13.x prior to 13.17, 14.x prior to 14.14, 15.x prior to 15.9, 16.x prior to 16.5 and 17.x prior to 17.1. Solution: Update to version 12.21, 13.17, 14.14, 15.9, 16.5, 17.1 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-10976 Common Vulnerability Exposure (CVE) ID: CVE-2024-10977 Common Vulnerability Exposure (CVE) ID: CVE-2024-10978 Common Vulnerability Exposure (CVE) ID: CVE-2024-10979
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.