The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4535 advisory.

    pgaudit     pg_repack     postgres-decoderbufs

    postgresql     [12.15-1.0.1]
    - Fixed postgresql port binding issue during bootup [Orabug: 35103668]

    [12.15-1]
    - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
    - Resolves: #2207932
    - Update to version 12.15

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5269 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)

    * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:5269 advisory.

    * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
    * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of postgresql installed on the remote host is prior to 12.15-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2POSTGRESQL12-2023-001 advisory.

    postgresql: Client memory disclosure when connecting with Kerberos to modified server (CVE-2022-41862)

    This enabled an attacker having database-level CREATE privilege to execute arbitrary code as the bootstrap     superuser. Database owners have that right by default, and explicit grants may extend it to other users.
    (CVE-2023-2454)

    While CVE-2016-2193 fixed most interaction between row security and user ID changes, it missed a scenario     involving function inlining. This leads to potentially incorrect policies being applied in cases where     role-specific policies are used and a given query is planned under one role and then executed under other     roles. This scenario can happen under security definer functions or when a common user and query is     planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a     user to complete otherwise-forbidden reads and modifications. This affects only databases that have used     CREATE POLICY to define a row security policy. (CVE-2023-2455)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of postgresql installed on the remote host is prior to 11.20-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2POSTGRESQL11-2023-001 advisory.

    This enabled an attacker having database-level CREATE privilege to execute arbitrary code as the bootstrap     superuser. Database owners have that right by default, and explicit grants may extend it to other users.
    (CVE-2023-2454)

    While CVE-2016-2193 fixed most interaction between row security and user ID changes, it missed a scenario     involving function inlining. This leads to potentially incorrect policies being applied in cases where     role-specific policies are used and a given query is planned under one role and then executed under other     roles. This scenario can happen under security definer functions or when a common user and query is     planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a     user to complete otherwise-forbidden reads and modifications. This affects only databases that have used     CREATE POLICY to define a row security policy. (CVE-2023-2455)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4527 advisory.

  - schema_element defeats protective search_path changes; It was found that certain database calls in     PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary     code. (CVE-2023-2454)

  - Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies     to be applied in certain cases where role-specific policies are used and a given query is planned under     one role and then executed under other roles. This scenario can happen under security definer functions or     when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an     incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects     only databases that have used CREATE POLICY to define a row security policy. (CVE-2023-2455)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of postgresql installed on the remote host is prior to 9.2.24-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2462 advisory.

    This enabled an attacker having database-level CREATE privilege to execute arbitrary code as the bootstrap     superuser. Database owners have that right by default, and explicit grants may extend it to other users.
    (CVE-2023-2454)

    While CVE-2016-2193 fixed most interaction between row security and user ID changes, it missed a scenario     involving function inlining. This leads to potentially incorrect policies being applied in cases where     role-specific policies are used and a given query is planned under one role and then executed under other     roles. This scenario can happen under security definer functions or when a common user and query is     planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a     user to complete otherwise-forbidden reads and modifications. This affects only databases that have used     CREATE POLICY to define a row security policy. (CVE-2023-2455)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PostgreSQL installed on the remote host is 11 prior to 11.20, 12 prior to 12.15, 13 prior to 13.11, 14 prior to 14.8, or 15 prior to 15.3. As such, it is potentially affected by multiple vulnerabilities :

  - CREATE SCHEMA ... schema_element defeats protective search_path changesmore details (CVE-2023-2454)

  - Row security policies disregard user ID changes after inliningmore details (CVE-2023-2455)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2201-1 advisory.

  - schema_element defeats protective search_path changes; It was found that certain database calls in     PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary     code. (CVE-2023-2454)

  - Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies     to be applied in certain cases where role-specific policies are used and a given query is planned under     one role and then executed under other roles. This scenario can happen under security definer functions or     when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an     incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects     only databases that have used CREATE POLICY to define a row security policy. (CVE-2023-2455)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
179863	Oracle Linux 8 : postgresql:12 (ELSA-2023-4535)	Nessus	Oracle Linux Local Security Checks	8/15/2023	10/23/2024	high
181620	RHEL 8 : postgresql:15 (RHSA-2023:5269)	Nessus	Red Hat Local Security Checks	9/19/2023	3/6/2025	high
181798	AlmaLinux 8 : postgresql:15 (ALSA-2023:5269)	Nessus	Alma Linux Local Security Checks	9/22/2023	1/13/2025	high
181979	Amazon Linux 2 : postgresql (ALASPOSTGRESQL12-2023-001)	Nessus	Amazon Linux Local Security Checks	9/27/2023	12/11/2024	high
182020	Amazon Linux 2 : postgresql (ALASPOSTGRESQL11-2023-001)	Nessus	Amazon Linux Local Security Checks	9/27/2023	12/11/2024	high
182723	Rocky Linux 8 : postgresql:13 (RLSA-2023:4527)	Nessus	Rocky Linux Local Security Checks	10/6/2023	11/6/2023	high
190696	Amazon Linux 2 : postgresql (ALAS-2024-2462)	Nessus	Amazon Linux Local Security Checks	2/19/2024	3/1/2025	high
175601	PostgreSQL 11.x < 11.20 / 12.x < 12.15 / 13.x < 13.11 / 14.x < 14.8 / 15.x < 15.3 Multiple Vulnerabilities	Nessus	Databases	5/14/2023	2/5/2025	high
175801	SUSE SLES12 Security Update : postgresql13 (SUSE-SU-2023:2201-1)	Nessus	SuSE Local Security Checks	5/16/2023	8/17/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high