tocsin

Debian/postgresql-17: high 7.5

Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled,

Action: Upgrade postgresql-17 to 17.10-0+deb13u1 or later.

Affected

introducedfixedlast affected
017.10-0+deb13u1-

Fixed versions

17.10-0+deb13u1

Sources

published · modified · JSON