A vulnerability has been found in PostgreSQL up to 9.1.22/9.2.17/9.3.13/9.4.8/9.5.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component CREATEDB/CREATEROLE Role. The manipulation leads to code injection.
This vulnerability is known as CVE-2016-5424. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2016-5424 | PostgreSQL up to 9.1.22/9.2.17/9.3.13/9.4.8/9.5.3 CREATEDB/CREATEROLE Role code injection (Nessus ID 93997 / ID 175811)
A vulnerability has been found in PostgreSQL up to 9.1.22/9.2.17/9.3.13/9.4.8/9.5.3 and classified as critical. Affected by this vulnerability is an unknown…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
- Keine herstellerspezifischen Bulletins in der Primärquelle hinterlegt.