KLA11091 Multiple vulnerabilities in PostgreSQL

Detect date:

08/10/2017

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions and obtain sensitive information.

Affected products:

PostgreSQL 9.2.x before 9.2.22
PostgreSQL 9.3.x before 9.3.18
PostgreSQL 9.4.x before 9.4.13
PostgreSQL 9.5.x before 9.5.8
PostgreSQL 9.6.x before 9.6.4

Solution:

Update to the latest version
Download PostgreSQL

Original advisories:

PostgreSQL Security Update Release

Impacts:

OSI

Related products:

PostgreSQL

CVE-IDS:

CVE-2017-75467.5Critical
CVE-2017-75474.0Warning

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.