PostgreSQL Multiple Vulnerabilities

Multiple vulnerabilities were identified in PostgreSQL. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, remote code execution and sensitive information disclosure on the targeted system.

Impact

• Remote Code Execution
• Information Disclosure
• Elevation of Privilege

System / Technologies affected

• PostgreSQL versions prior to 18.2
• PostgreSQL versions prior to 17.8
• PostgreSQL versions prior to 16.12
• PostgreSQL versions prior to 15.16
• PostgreSQL versions prior to 14.21

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

• The vendor has issued fixes:
• Update to PostgreSQL version 18.2
• Update to PostgreSQL version 17.8
• Update to PostgreSQL version 16.12
• Update to PostgreSQL version 15.16
• Update to PostgreSQL version 14.21

Source link