VID |
25255 |
Severity |
40 |
Port |
5432 |
Protocol |
TCP |
Class |
DB |
Detailed Description |
The version of PostgreSQL installed on the remote host is 10.x prior to 10.1. It is, therefore, affected by multiple vulnerabilities including a denial of service attack.
* References: https://www.postgresql.org/about/news/1801/ https://www.postgresql.org/docs/current/static/release-10-1.html
* Platforms Affected: PostgreSQL prior to 10.1 Any operating system Any version |
Recommendation |
Upgrade to the latest version of PostgreSQL (10.1 or later), available from the PostgreSQL Web page at http://www.postgresql.org/download/ |
Related URL |
CVE-2017-12172,CVE-2017-15098,CVE-2017-15099 (CVE) |
Related URL |
(SecurityFocus) |
Related URL |
(ISS) |
|