When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-docsUpgrade pg_repackUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-upgrade-devel | May 4, 2022 | Mar 4, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql12Upgrade postgresql15Upgrade postgresql13Upgrade postgresql | Mar 26, 2024 | Mar 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-server | Feb 23, 2023 | Mar 4, 2022 |
| Amazon_linux | — | Upgrade postgresql94Upgrade postgresql96Upgrade postgresql92Upgrade postgresql95Upgrade postgresql93 | Jan 25, 2023 | Nov 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 4, 2022 |
| Centos_linux | — | Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pg_repack-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufsUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgresql-test-debuginfo | Dec 22, 2021 | Dec 21, 2021 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql13-serverUpgrade postgresql14-serverUpgrade postgresql11-serverUpgrade postgresql10-serverUpgrade postgresql96-serverUpgrade postgresql12-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-test | Feb 24, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-docs | Mar 2, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docs | Dec 23, 2021 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1 | Mar 4, 2022 | Mar 4, 2022 |
| Redhat_linux | — | No solution existsUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade pgauditUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3Upgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repackUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresqlUpgrade postgresql-upgradeUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-pltcl-debuginfo | Dec 22, 2021 | Dec 21, 2021 |
| Rocky_linux | — | Upgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade pg_repack-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3Upgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade pgaudit-debuginfoUpgrade pgauditUpgrade postgresql-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql | Mar 5, 2024 | Mar 4, 2022 |
| Suse | — | Upgrade postgresql96-docsUpgrade postgresql14-serverUpgrade postgresql96-plperlUpgrade postgresql12-develUpgrade postgresql10-testUpgrade postgresql10-contribUpgrade postgresql14-server-develUpgrade postgresql12-docsUpgrade postgresql12-contribUpgrade postgresql13-plpythonUpgrade postgresql12-pltclUpgrade postgresql13-docsUpgrade postgresql96-serverUpgrade postgresql14Upgrade postgresql13-llvmjit-develUpgrade libecpg6Upgrade postgresql13-testUpgrade postgresql13-server-develUpgrade postgresql14-plperlUpgrade postgresql10-pltclUpgrade postgresql13-pltclUpgrade postgresql14-llvmjitUpgrade postgresql96Upgrade postgresql14-devel-miniUpgrade postgresql96-contribUpgrade postgresql14-pltclUpgrade postgresql-server-develUpgrade postgresql14-docsUpgrade libecpg6-32bitUpgrade libpq5-32bitUpgrade postgresql14-contribUpgrade postgresql12-server-develUpgrade postgresql13Upgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql10-develUpgrade postgresql10Upgrade postgresql-docsUpgrade postgresql12Upgrade postgresql-serverUpgrade postgresql13-contribUpgrade postgresql10-docsUpgrade postgresql10-serverUpgrade postgresql14-plpythonUpgrade postgresql12-plpythonUpgrade postgresql13-serverUpgrade postgresql13-plperlUpgrade postgresql14-testUpgrade postgresql13-develUpgrade postgresql12-plperlUpgrade postgresqlUpgrade postgresql96-plpythonUpgrade postgresql12-testUpgrade postgresql13-llvmjitUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql14-develUpgrade postgresql96-pltclUpgrade postgresql12-serverUpgrade postgresql10-plperlUpgrade postgresql12-llvmjitUpgrade postgresql-contribUpgrade postgresql10-plpythonUpgrade libpq5 | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-13Upgrade postgresql-10 | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub