PostgreSQL 12.x < 12.20 / 13.x < 13.16 / 14.x < 14.13 / 15.x < 15.8 / 16.x 16.4 SQL Injection<

The version of PostgreSQL installed on the remote host is 12 prior to 12.20, 13 prior to 13.16, 14 prior to 14.13, 15 prior to 15.8, or 16 prior to 16.4. As such, it is potentially affected by a vulnerability : - Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an...

CVE-2024-7348 affecting package postgresql for versions less than 16.4-1

CVE-2024-7348 affecting package postgresql for versions less than 16.4-1. An upgraded version of the package is available that resolves this issue...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary SQL code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the dereferencing of a zero pointer due to concurrent access to resources race condition. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code under the name of the...

Debian: Security Advisory (DSA-5745-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BIT-POSTGRESQL-2024-7348 PostgreSQL relation replacement during pg_dump executes arbitrary SQL

Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting...

[SECURITY] [DSA 5746-1] postgresql-13 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5746-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 09, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5745-1] postgresql-15 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5745-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 09, 2024 https://www.debian.org/security/faq -...

CVE-2024-7348

A vulnerability was found in PostgreSQL. A Race condition in pgdump allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the R...

SUSE CVE-2024-7348

Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting...

Debian dsa-5746 : libecpg-compat3 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5746 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5746-1 [email protected] https://www.debian.org/security/ Moritz...

PostgreSQL TOCTOU Vulnerability (Aug 2024) - Windows

PostgreSQL is prone to a time-of-check time-of-use TOCTOU race condition vulnerability in pgdump. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

PostgreSQL TOCTOU Vulnerability (Aug 2024) - Linux

PostgreSQL is prone to a time-of-check time-of-use TOCTOU race condition vulnerability in pgdump. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

DSA-5746-1 postgresql-13 - security update

Bulletin has no description...

Debian dsa-5745 : libecpg-compat3 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5745 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5745-1 [email protected] https://www.debian.org/security/ Moritz...

CVE-2024-7348

creationtimestamp| type| source ---|---|--- 2024-08-08 16:24:06+00:00| seen| https://t.me/cvedetector/2789 2024-08-13 09:33:03+00:00| published-proof-of-concept| https://t.me/HackingInsights/9642 2024-08-13 19:07:22+00:00| exploited| https://t.me/truesecator/6089 2025-07-31 22:17:50+00:00| seen|...

ALPINE-CVE-2024-7348

Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting...

DEBIAN-CVE-2024-7348

Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting...

CVE-2024-7348

Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting...

AZL-47636 CVE-2024-7348 affecting package postgresql for versions less than 16.4-1

Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting...