postgresql-10 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the postgresql-10 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Time-of-check Time-of-use (TOCTOU)	<10.23-0ubuntu0.18.04.2+esm2
M CVE-2023-5870	<10.23-0ubuntu0.18.04.2+esm1
M Integer Overflow or Wraparound	<10.23-0ubuntu0.18.04.2+esm1
M CVE-2023-5868	<10.23-0ubuntu0.18.04.2+esm1
M CVE-2023-2455	<10.23-0ubuntu0.18.04.2
M CVE-2023-2454	<10.23-0ubuntu0.18.04.2
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<10.22-0ubuntu0.18.04.1
M Incomplete Cleanup	<10.21-0ubuntu0.18.04.1
M SQL Injection	<10.19-0ubuntu0.18.04.1
M Insufficiently Protected Credentials	<10.19-0ubuntu0.18.04.1
M Out-of-Bounds	<10.17-0ubuntu0.18.04.1
M Information Exposure	<10.17-0ubuntu0.18.04.1
H NULL Pointer Dereference	<10.18-0ubuntu0.18.04.1
M Use of a Broken or Risky Cryptographic Algorithm	<10.15-0ubuntu0.18.04.1
M SQL Injection	<10.15-0ubuntu0.18.04.1
M Permissive Whitelist	<10.15-0ubuntu0.18.04.1
M SQL Injection	<10.14-0ubuntu0.18.04.1
M Untrusted Search Path	<10.14-0ubuntu0.18.04.1
M Missing Authorization	<10.12-0ubuntu0.18.04.1
M SQL Injection	<10.10-0ubuntu0.18.04.1
M Out-of-bounds Write	<10.9-0ubuntu0.18.04.1
M Improper Access Control	<10.8-0ubuntu0.18.04.1
M SQL Injection	<10.6-0ubuntu0.18.04.1
M Incorrect Authorization	<10.5-0ubuntu0.18.04
M SQL Injection	<10.5-0ubuntu0.18.04
L Incorrect Permission Assignment for Critical Resource	<10.4-0ubuntu0.18.04
M CVE-2018-1058	<10.3-1