A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-testUpgrade pgauditUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgres-decoderbufs | May 4, 2022 | Jun 1, 2021 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql15Upgrade postgresql14Upgrade postgresql | Mar 26, 2024 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpython3Upgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-plpython2Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-libsUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-server | Sep 28, 2023 | Jun 1, 2021 |
| Amazon_linux | — | Upgrade postgresql96 | Jul 13, 2021 | May 27, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 1, 2021 |
| Centos_linux | — | Upgrade pgauditUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade postgresqlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql-server-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython | Jun 10, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 30, 2025 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-devel | Sep 16, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-pltcl | Oct 26, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-server | Sep 7, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-contrib | Aug 10, 2021 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-contribUpgrade rh-postgresql10-postgresqlUpgrade postgresql-upgradeUpgrade postgresql-develUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-staticUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pltclUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresql-plperlUpgrade postgresql-libs | Jun 11, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red_hat Jboss_eap | — | — | Jun 18, 2021 | Jun 1, 2021 |
| Redhat_linux | — | Upgrade postgresql-libsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-server-develUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoNo solution existsUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-test-debuginfoUpgrade postgresql-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfo | Jun 10, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade pgaudit-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-static | May 5, 2022 | Jun 1, 2021 |
| Suse | — | Upgrade postgresql12-server-develUpgrade postgresql12-testUpgrade postgresql13-llvmjit-develUpgrade libecpg6Upgrade postgresql12-develUpgrade postgresql13-plpythonUpgrade postgresql10-pltclUpgrade postgresql10-testUpgrade postgresql14-serverUpgrade postgresql10-contribUpgrade postgresql13-contribUpgrade postgresql14-server-develUpgrade libpq5Upgrade postgresql10-plpythonUpgrade postgresql12Upgrade postgresql12-plperlUpgrade postgresql14Upgrade postgresql12-contribUpgrade postgresql13-develUpgrade postgresql14-pltclUpgrade postgresql12-plpythonUpgrade postgresql12-llvmjitUpgrade postgresql14-docsUpgrade postgresql13-server-develUpgrade postgresql13-pltclUpgrade postgresql14-plpythonUpgrade postgresql10-docsUpgrade postgresql14-plperlUpgrade postgresql10Upgrade postgresql13-llvmjitUpgrade postgresql12-serverUpgrade postgresql13-plperlUpgrade postgresql10-develUpgrade postgresql12-pltclUpgrade postgresql10-serverUpgrade postgresql13Upgrade postgresql14-contribUpgrade postgresql13-testUpgrade postgresql13-docsUpgrade libpq5-32bitUpgrade postgresql10-plperlUpgrade postgresql12-docsUpgrade postgresql13-serverUpgrade postgresql14-devel | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-10Upgrade postgresql-13 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub