Fedora 35 : postgresql-jdbc (2022-cdeabe1bc0)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-cdeabe1bc0 advisory. Security fix for CVE-2022-31197. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2022-31197

PostgreSQL JDBC Driver PgJDBC for short allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the "java.sql.ResultRow.refreshRow" method is not performing escaping of column names so a malicious column name that...

PT-2022-4318

Name of the Vulnerable Software and Affected Versions PostgreSQL JDBC Driver versions prior to 42.2.26 PostgreSQL JDBC Driver versions prior to 42.4.1 Description The PGJDBC implementation of the java.sql.ResultRow.refreshRow method is not performing escaping of column names, allowing a malicious...