��f�B�A

PostgreSQL PL/Perl�ɐ[��ȐƎ㐫�@��ɍX�V��F�Z�L��e�B�j��[�X�A��[�g

PostgreSQL�ɏd��ȐƎ㐫�uCVE-2024-10979�v��邱�Ƃ��B��ϐ��̐��s��ɂ��Ǝ㐫�ŁA��p��ƔC�ӂ̃R�[�h��s��\�Ƃ��Ă��B

» 2024�N11��20�� 07��30�� J

[�㓡��n�C�L��ЃI��O�X]

��̋L��ł��B��o�^��ƑS�Ă��܂��B

�@Varonis��2024�N11��15��i��n��ԁj�A��[�V��i��f�[�^�x�[�X�Ǘ��V�X�e��uPostgreSQL�v�ɐ[��ȐƎ�i��Ⴍ�j��uCVE-2024-10979�v��݂��Ɠ`��B

�@��Ǝ㐫�͍U��҂�PostgreSQL�Z�b�V��v��Z�X�ŔC�ӂ̊��ϐ��ݒ�ł��_�ɋN��Ă��A�K�؂Ȋ��䂪��{��Ă��Ȃ��V�X�e��ɐ[��ȃ��X�N��炷�\��B

PostgreSQL PL/Perl�ɃZ�L��e�B��X�N�A��ɑ΍��

�@CVE-2024-10979��PostgreSQL�̌��g��̈�ł��PL/Perl�ɂ��ϐ��̕s�K�؂Ȑ��䂪��Ƃ��Ă��B��̐Ǝ㐫��p��ꂽ�ꍇ�A�U��҂ɃV�X�e��̊��ϐ��iPATH�Ȃǁj��ύX��A�ŏI�I�ɃT�[�o��ŔC�ӂ̃R�[�h��s��Ă��܂��B�܂��A�N�G��s��ăf�[�^�x�[�X��ڍׂȏ�񂪐ގ悳��Ă��܂��\��BPostgreSQL�̌��]��ł�CVE-2024-10979�̋��ʐƎ㐫�]��V�X�e��iCVSS�j�̃X�R�A�l��8.8�ƕ]��Ă��B

�@�e��󂯂�PostgreSQL�̃o�[�W��͈ȉ��̒ʂ肾�B

PostgreSQL 17.1��O�̃o�[�W��
PostgreSQL 16.5��O�̃o�[�W��
PostgreSQL 15.9��O�̃o�[�W��
PostgreSQL 14.14��O�̃o�[�W��
PostgreSQL 13.17��O�̃o�[�W��
PostgreSQL 12.21��O�̃o�[�W��

�@�C��ꂽ�o�[�W��͈ȉ��̒ʂ肾�B

PostgreSQL 17.1��т��ȍ~�̃o�[�W��
PostgreSQL 16.5��т��ȍ~�̃o�[�W��
PostgreSQL 15.9��т��ȍ~�̃o�[�W��
PostgreSQL 14.14��т��ȍ~�̃o�[�W��
PostgreSQL 13.17��т��ȍ~�̃o�[�W��
PostgreSQL 12.21��т��ȍ~�̃o�[�W��

�@CVE-2024-10979�̃Z�L��e�B�΍�Ƃ��PostgreSQL��ŐV�o�[�W��ɍX�V��邱�Ƃ��Ă��B�܂��s�v�Ȋg��@�\�𖳌��ɂ��ċ��g��@�\��ŏ��ɗ}��Ƃ��΍��߂��Ă��B

�֘A�L��

�U��҂͂ǂ��EDR�̌��m��̂��H�@Palo Alto Networks��Ŕ��
Palo Alto Networks��Cortex XDR��_��T�C�o�[�U��̏ڍׂ𔭕\��B��ЃA�N�^�[��G��h�|�C��g�Z�L��e�B��i�̌��m��ǂ̂悤�ɉ��悤�Ƃ��Ă��̂��ڍׂɉ��Ă��B
$�Z�L��e�B�^�p�͎�j��@��N��[�gSOC��[�_�[��}�l�[�W�h�T�[�r�X�̖{��$ �Z�L��e�B�^�p�͎�j��@��N��[�gSOC��[�_�[��}�l�[�W�h�T�[�r�X�̖{��
�Z�L��e�B�l�ނ��s��A�}�l�[�W�h�T�[�r�X��ɂ��܂��p��ĕ��S��ጸ��邩��Z�L��e�B�g�D�̏d�v�ȃe�[�}��B��N��[�g��SOC��[�_�[��C��Ɩ��^��g�D�ł��ׂ��Ɩ��̊��B
��ǁA�U��Ɩh�䑤�̂ǂ��炪�L��Ȃ́H�@�L��҂��u�h�䑤�̋��݁v
�T�C�o�[�Z�L��e�B�̐��E�ł́u�w�U��x�Ɓw�h�䑤�x�̂ǂ��炪�L��H�v�Ƃ��b�肪��΂��΋c�_�ɏ��B��AI�̓o��ɂ��āA�U��L��ɂȂ��Ă��Ƃ��ӌ��邪�L��҂͂ǂ��l��Ă��̂��B
Google Play�̐R��g��C�̖ؔn�ɗv��Ӂ@��v200��_�E��[�h
Cybersecurity News��2024�N11��12��i��n��ԁj�AGoogle Play��z�z��ꂽ��̃A�v��Ƀg��C�̖ؔn�uAndroid.FakeApp�v�̈��킪�܂܂�Ă��ƕ񂶂��B�댯�ȃA�v��̈ꗗ��炩�ɂȂ��Ă��B