A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 16, 2020 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql14Upgrade postgresqlUpgrade postgresql15 | Jan 19, 2021 | Nov 16, 2020 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-contrib | Jun 24, 2021 | Nov 16, 2020 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql96Upgrade postgresql92 | Jan 15, 2021 | Nov 16, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 16, 2020 |
| Centos_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade pgaudit-debuginfoUpgrade pgauditUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contribUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-pltcl-debuginfo | Dec 21, 2020 | Nov 16, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 16, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-docs | Feb 22, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-test | Apr 30, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-pltcl | Mar 24, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-test | Dec 15, 2020 | Nov 16, 2020 |
| Oracle_linux | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade pgauditUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-develUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-docsUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-libsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql | Dec 23, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsNo solution existsUpgrade postgresql-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-pltcl | Dec 21, 2020 | Nov 16, 2020 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsource | Mar 12, 2024 | Nov 16, 2020 |
| Suse | — | Upgrade postgresql96-plperlUpgrade postgresql12-serverUpgrade postgresql12-develUpgrade postgresql10-develUpgrade postgresql13Upgrade postgresql-llvmjitUpgrade postgresql10-contribUpgrade postgresql-develUpgrade postgresql96-docsUpgrade postgresql10-docsUpgrade postgresql13-contribUpgrade libpq5-32bitUpgrade postgresql12-plperlUpgrade postgresql96-pltclUpgrade postgresql12-server-develUpgrade postgresql96-contribUpgrade postgresql-contribUpgrade postgresql13-pltclUpgrade postgresql13-serverUpgrade postgresql10-pltclUpgrade postgresql13-testUpgrade postgresql13-plperlUpgrade postgresql13-docsUpgrade postgresql12-pltclUpgrade postgresql12-docsUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql96Upgrade postgresql10-plpythonUpgrade postgresql13-server-develUpgrade postgresql13-plpythonUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql10-testUpgrade postgresqlUpgrade libecpg6Upgrade postgresql-serverUpgrade postgresql12-testUpgrade postgresql96-plpythonUpgrade postgresql10-plperlUpgrade postgresql13-develUpgrade postgresql12-contribUpgrade postgresql10Upgrade libecpg6-32bitUpgrade postgresql96-serverUpgrade postgresql12-llvmjitUpgrade postgresql-testUpgrade postgresql12Upgrade postgresql12-plpythonUpgrade libpq5Upgrade postgresql10-server | Dec 11, 2020 | Nov 16, 2020 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-10Upgrade postgresql-12 | Mar 22, 2023 | Nov 16, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub