The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using     standard, database independent Java code. The PGJDBC implementation of the     `java.sql.ResultRow.refreshRow()` method is not performing escaping of column names so a malicious column     name that contains a statement terminator, e.g. `;`, could lead to SQL injection. This could lead to     executing additional SQL commands as the application's JDBC user. User applications that do not invoke the     `ResultSet.refreshRow()` method are not impacted. User application that do invoke that method are impacted     if the underlying database that they are querying via their JDBC application may be under the control of     an attacker. The attack requires the attacker to trick the user into executing SQL against a table name     who's column names would contain the malicious SQL and subsequently invoke the `refreshRow()` method on     the ResultSet. Note that the application's JDBC user and the schema owner need not be the same. A JDBC     application that executes as a privileged user querying database schemas owned by potentially malicious     less-privileged users would be vulnerable. In that situation it may be possible for the malicious user to     craft a schema that causes the application to execute commands as the privileged user. Patched versions     will be released as `42.2.26` and `42.4.1`. Users are advised to upgrade. There are no known workarounds     for this issue. (CVE-2022-31197)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-31197

high Nessus Plugin ID 224607

Version 1.7

Version 1.6

Version 1.4

Version 1.3

Version 1.1

Version 1.7 Feb 4, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602040631
Version 1.6 Feb 3, 2026, 10:27 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602032227
Version 1.4 Sep 30, 2025, 5:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509301708
Version 1.3 Sep 14, 2025, 2:50 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509141450
Version 1.1 Mar 5, 2025, 8:29 AM New Plugin Feed: 202503050829