PostgreSQL 11.x < 11.13, 12.x < 12.8, 13.x < 13.4 Memory Disclosure Vulnerability - Windows

PostgreSQL is prone to a memory disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...

SUSE SLED12: postgresql12 / postgresql12-contrib / postgresql12-devel / etc (SUSE-SU-2021:3119-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3119-1 advisory. - CVE-2021-3677: Fixed memory disclosure in certain queries bsc1189748. - Fixed build with llvm12 on s390x bsc1185952. - Re-enabled...

Security fix for the ALT Linux 9 package postgresql12-1C version 12.7-alt0.M90P.2

12.7-alt0.M90P.2 built Aug. 23, 2021 Alexei Takaseev in task 282411 Aug. 11, 2021 Alexei Takaseev - Fixes CVE-2021-3677...

PostgreSQL 11.x < 11.13 / 12.x < 12.8 / 13.x < 13.4 Memory Disclosure

The version of PostgreSQL installed on the remote host is 11 prior to 11.13, 12 prior to 12.8, or 13 prior to 13.4. As such, it is potentially affected by a memory disclosure vulnerability: - A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any...

Security fix for the ALT Linux 10 package postgresql12 version 12.8-alt1

12.8-alt1 built Aug. 16, 2021 Alexei Takaseev in task 282403 Aug. 11, 2021 Alexei Takaseev - 12.8 Fixes CVE-2021-3677...

FreeBSD : PostgreSQL server -- Memory disclosure in certain queries (b471130b-fb86-11eb-87db-6cc21735f730)

The PostgreSQL Project reports : A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...

Vulnerability in core server (CVE-2021-3677)

Memory disclosure in certain queries A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...

Security fix for the ALT Linux 10 package postgresql14 version 13.4-alt1

Aug. 11, 2021 Alexei Takaseev 13.4-alt1 - 13.4 Fixes CVE-2021-3677...

Security fix for the ALT Linux 10 package postgresql15-1C version 12.7-alt2

Aug. 11, 2021 Alexei Takaseev 12.7-alt2 - Fixes CVE-2021-3677...

Security fix for the ALT Linux 10 package postgresql15 version 13.4-alt1

Aug. 11, 2021 Alexei Takaseev 13.4-alt1 - 13.4 Fixes CVE-2021-3677...

Ubuntu: Security Advisory (USN-3677-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3677-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3677-2 advisory. USN-3677-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement H...

CVE-2016-3677

The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

CVE-2016-3677

Huawei Wear App for Android is affected (versions before 15.0.0.307) by CVE-2016-3677 due to lack of SSL certificate validation. This allows local users to cause unspecified impact via unknown vectors. Remediation per Huawei advisory is to update to a fixed version (15.0.0.307 or later); exploita...

Oracle: Security Advisory (ELSA-2010-0825)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3677

CVE-2015-3677 affects Apple OS X prior to 10.10.4, specifically the LZVN compression feature in AppleFSCompression. The vulnerability allows a crafted app to disclose kernel memory layout, a memory-disclosure issue in LZVN processing. The underlying impact is partial leakage of kernel memory layo...

Scientific Linux Security Update : shim on SL7.x x86_64 (20141104)

A heap-based buffer overflow flaw was found the way shim parsed certain IPv6 addresses. If IPv6 network booting was enabled, a malicious server could supply a crafted IPv6 address that would cause shim to crash or, potentially, execute arbitrary code. CVE-2014-3676 An out-of-bounds memory write...

openSUSE Security Update : gnu-efi / pesign / shim (openSUSE-2015-48)

shim was updated to fix several security issues. - OOB read access when parsing DHCPv6 packets remote DoS CVE-2014-3675. - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option RCE CVE-2014-3676. - Memory corruption when processing user provided MOK lists CVE-2014-3677...

SuSE 11.3 Security Update : shim (SAT Patch Number 9997)

shim has been updated to fix three security issues : - OOB read access when parsing DHCPv6 packets remote DoS. CVE-2014-3675 - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option RCE. CVE-2014-3676 - Memory corruption when processing user provided MOK lists...

Fedora 19 : mokutil-0.2.0-1.fc19 / shim-signed-0.8-2 (2014-14059)

This update fixes CVEs CVE-2014-3675, CVE-2014-3676, and CVE-2014-3677, as well as moving to the 0.8 release, which adds support for Aarch64 and fixes several bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...