The version of postgresql95 installed on the remote host is prior to 9.5.24-1.82. The version of postgresql96 installed on the remote host is prior to 9.6.20-1.84. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1476 advisory.

    A flaw was found in postgresql. If a client application that creates additional database connections only     reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a     man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest     threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    (CVE-2020-25694)

    A flaw was found in postgresql. An attacker having permission to create non-temporary objects in at least     one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from     this vulnerability is to data confidentiality and integrity as well as system availability.
    (CVE-2020-25695)

    A flaw was found in the psql interactive terminal of PostgreSQL. If an interactive psql session uses \gset     when querying a compromised server, this flaw allows an attacker to execute arbitrary code as the     operating system account running psql. The highest threat from this vulnerability is to confidentiality,     integrity, as well as system availability. (CVE-2020-25696)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux AMI : postgresql95, postgresql96 (ALAS-2021-1476)

high Nessus Plugin ID 144988

Version 1.4