A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpq-develUpgrade libpq | May 13, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresqlUpgrade postgresql15Upgrade postgresql12 | Mar 26, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-server-develUpgrade libpq-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade libpq-develUpgrade postgresql-upgrade-develUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-plpython2Upgrade postgresql-docsUpgrade libpq | Mar 5, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade libpq-debuginfoUpgrade libpq-debugsourceUpgrade libpq-devel-debuginfoUpgrade libpq-develUpgrade libpq | May 13, 2022 | Mar 2, 2022 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql96-serverUpgrade postgresql10-serverUpgrade postgresql11-serverUpgrade postgresql12-serverUpgrade postgresql13-serverUpgrade postgresql14-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plpython | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql | Mar 2, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-pltcl | Feb 24, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade libpq-develUpgrade libpq | May 18, 2022 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1 | Mar 2, 2022 | Mar 2, 2022 |
| Redhat_linux | — | Upgrade libpq-develUpgrade libpq-devel-debuginfoUpgrade libpq-debugsourceUpgrade libpqNo solution existsUpgrade libpq-debuginfo | May 13, 2022 | Mar 2, 2022 |
| Rocky_linux | — | Upgrade libpq-debuginfoUpgrade libpq-develUpgrade libpqUpgrade libpq-debugsourceUpgrade libpq-devel-debuginfo | Mar 5, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade postgresql12-plperlUpgrade postgresql12-serverUpgrade postgresql12-pltclUpgrade postgresql12-server-develUpgrade postgresql10-plperlUpgrade postgresql13-contribUpgrade postgresql13-testUpgrade postgresql-contribUpgrade postgresql14Upgrade postgresql12-docsUpgrade postgresql96-contribUpgrade postgresql10-docsUpgrade postgresql96Upgrade postgresql13-llvmjit-develUpgrade postgresql10-develUpgrade postgresql96-pltclUpgrade postgresql14-server-develUpgrade postgresql12-develUpgrade libecpg6Upgrade postgresql13-plperlUpgrade postgresql12-plpythonUpgrade postgresql-server-develUpgrade postgresql96-docsUpgrade postgresql14-plperlUpgrade postgresql14-plpythonUpgrade postgresql96-plperlUpgrade libpq5-32bitUpgrade postgresql-plpythonUpgrade postgresql13-pltclUpgrade postgresql14-develUpgrade postgresql13-serverUpgrade postgresql14-contribUpgrade postgresql13Upgrade postgresql-develUpgrade postgresql10-pltclUpgrade postgresql13-docsUpgrade postgresql14-testUpgrade postgresql96-serverUpgrade postgresql-serverUpgrade postgresql10-testUpgrade postgresql13-server-develUpgrade postgresql12-contribUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql14-docsUpgrade postgresql12Upgrade postgresql-plperlUpgrade postgresql14-serverUpgrade postgresql96-plpythonUpgrade postgresql-docsUpgrade postgresql12-llvmjitUpgrade postgresql10-plpythonUpgrade postgresql10-serverUpgrade postgresql10-contribUpgrade postgresqlUpgrade postgresql14-devel-miniUpgrade postgresql14-pltclUpgrade postgresql13-develUpgrade postgresql12-testUpgrade postgresql13-llvmjitUpgrade postgresql13-plpythonUpgrade postgresql10Upgrade postgresql-pltclUpgrade postgresql14-llvmjit | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-13Upgrade postgresql-12Upgrade postgresql-10 | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub