A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docs | May 4, 2022 | Oct 11, 2021 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql14Upgrade postgresql13Upgrade postgresql15 | Mar 26, 2024 | Oct 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-server-develUpgrade postgresql-plpython2Upgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql-llvmjitUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-test | Sep 28, 2023 | Oct 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 11, 2021 |
| Centos_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltclUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufs | Jun 10, 2021 | Jun 9, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Oct 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-pltcl | Dec 28, 2021 | Oct 11, 2021 |
| Oracle_linux | — | Upgrade postgresql-contribUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-pltclUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-plperlUpgrade rh-postgresql10-postgresql-docsUpgrade pgauditUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-serverUpgrade rh-postgresql10-postgresqlUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-serverUpgrade postgresql-server-develUpgrade postgresqlUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-contribUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-plpython3 | Jun 11, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Redhat_linux | — | Upgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperlUpgrade postgresql-debugsourceUpgrade postgresql-testNo solution existsUpgrade postgresql-serverUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docsUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plperl-debuginfo | Jun 10, 2021 | Jun 9, 2021 |
| Rocky_linux | — | Upgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-debugsourceUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-server | May 5, 2022 | Oct 11, 2021 |
| Suse | — | Upgrade postgresql10-plpythonUpgrade postgresql12-contribUpgrade postgresql13Upgrade postgresql12-testUpgrade postgresql10-pltclUpgrade postgresql14Upgrade postgresql12-plpythonUpgrade postgresql14-server-develUpgrade postgresql10-plperlUpgrade postgresql10-docsUpgrade postgresql10-develUpgrade postgresql13-plperlUpgrade postgresql12-plperlUpgrade libecpg6Upgrade postgresql14-contribUpgrade postgresql13-pltclUpgrade postgresql13-serverUpgrade postgresql12-develUpgrade libpq5-32bitUpgrade postgresql13-llvmjit-develUpgrade postgresql12-pltclUpgrade postgresql14-docsUpgrade postgresql12-server-develUpgrade postgresql14-plpythonUpgrade postgresql12-serverUpgrade postgresql13-contribUpgrade postgresql10-testUpgrade postgresql12Upgrade postgresql10-serverUpgrade postgresql13-llvmjitUpgrade libpq5Upgrade postgresql12-llvmjitUpgrade postgresql13-plpythonUpgrade postgresql14-develUpgrade postgresql14-plperlUpgrade postgresql13-testUpgrade postgresql12-docsUpgrade postgresql13-server-develUpgrade postgresql13-develUpgrade postgresql14-pltclUpgrade postgresql10-contribUpgrade postgresql14-serverUpgrade postgresql13-docsUpgrade postgresql10 | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-13Upgrade postgresql-10 | Jun 2, 2021 | May 27, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub