CVE漏洞中文网

0DayBank一个专门收集整理全球互联网漏洞的公开发布网站
  1. 首页
  2. CVE
  3. 正文

CVE-2017-15098 PostgreSQL Memory Disclosure Vulnerability.

2017年12月8日 917点热度 0人点赞 0条评论

漏洞类别:Local

漏洞等级:

漏洞信息

PostgreSQL, often simply Postgres, is an object-relational database management system (ORDBMS).

Following vulnerabilities are fixed:
CVE-2017-15098: Memory disclosure in JSON functions

Affected Versions:
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20

QID Detection Logic(Authenticated)
This checks for vulnerable versions of PostgreSQL.

漏洞危害

On successful exploitation attacker can crash the server or disclose a few bytes of server memory.

解决方案

Vendor has released fix. Refer advisory here

Patch:
Following are links for downloading patches to fix the vulnerabilities:

PostgreSQL: Windows

0daybank

标签: 暂无
最后更新:2017年12月8日

小助手

这个人很懒,什么都没留下

点赞
< 上一篇
下一篇 >

文章评论

您需要 登录 之后才可以评论

COPYRIGHT © 2024 www.pdr.cn CVE漏洞中文网. ALL RIGHTS RESERVED.

鲁ICP备2022031030号

联系邮箱:wpbgssyubnmsxxxkkk@proton.me