Test ID:	1.3.6.1.4.1.25623.1.1.2.2022.2802
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2022-2802)
Summary:	The remote host is missing an update for the Huawei EulerOS 'postgresql' package(s) announced via the EulerOS-SA-2022-2802 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'postgresql' package(s) announced via the EulerOS-SA-2022-2802 advisory. Vulnerability Insight: A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.(CVE-2022-2625) Affected Software/OS: 'postgresql' package(s) on Huawei EulerOS V2.0SP8. Solution: Please install the updated package(s). CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-2625 https://security.gentoo.org/glsa/202211-04 https://bugzilla.redhat.com/show_bug.cgi?id=2113825 https://www.postgresql.org/about/news/postgresql-145-138-1212-1117-1022-and-15-beta-3-released-2496/
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.