ROS-20240329-12

Vulnerability of PostgreSQL database management system is related to the possibility of sending signals to superuser processes using the pg_signal_backend role.
to superuser processes using the pg_signal_backend role. Exploitation of the vulnerability could allow
a remote attacker to cause a denial of service to a specific background process

A vulnerability in the PostgreSQL database management system is related to information disclosure. Exploitation
the vulnerability could allow a remote attacker to gain unauthorized access to protected information by sending unauthorized past messages to the protected process.
protected information by sending an unverified string during Kerberos session establishment

A vulnerability in the PostgreSQL database management system is related to the lack of service data protection in function calls with aggregation.
aggregation function calls. Exploitation of the vulnerability could allow an attacker acting remotely,
disclose protected information when the unknown type is passed as an argument

Vulnerability of database management system functions array_append, array_prepend, array_subscript_handler
PostgreSQL is related to integer overflow on array modification. Exploitation of the vulnerability could
allow a remote intruder to execute arbitrary code

A vulnerability in the Schema Handler component of the PostgreSQL database management system is related to a flaw in the
access delimitation. Exploitation of the vulnerability could allow a remote attacker,
elevate his privileges and execute arbitrary code using the CREATE SCHEMA command

A vulnerability in the Schema Handler component of the PostgreSQL database management system is related to errors in the
security settings. Exploitation of the vulnerability could allow an attacker acting remotely,
bypass security restrictions

PostgreSQL database management system vulnerability is related to the possibility of SQL injection in extensions,
that use quoting constructs (@extowner@, @extschema@ or @extschema:…@) inside parentheses
(dollar quoting, ‘’, or “”). Exploitation of the vulnerability could allow an attacker acting remotely to
execute an arbitrary SQL query against a database