RHEL 8 : postgresql (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 - An issue was...

CVE-2020-21469

An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pgreloadconf access...

CVE-2020-21469

POInted vulnerability: CVE-2020-21469 affects PostgreSQL 12.2; allows denial-of-service by repeatedly sending SIGHUP signals. Note: vendor disputes claim that untrusted users cannot send SIGHUP; signals would require a PostgreSQL superuser, pg_reload_conf access, or OS-level privileges. Public ex...