vulnerability
Alma Linux: CVE-2021-32028: Important: postgresql:9.6 security update (Multiple Advisories)
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Oct 11, 2021 | May 4, 2022 | Feb 13, 2024 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Oct 11, 2021
Added
May 4, 2022
Modified
Feb 13, 2024
Description
A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
Solution(s)
alma-upgrade-pgauditalma-upgrade-postgres-decoderbufsalma-upgrade-postgresqlalma-upgrade-postgresql-contribalma-upgrade-postgresql-docsalma-upgrade-postgresql-plperlalma-upgrade-postgresql-plpython3alma-upgrade-postgresql-pltclalma-upgrade-postgresql-serveralma-upgrade-postgresql-server-develalma-upgrade-postgresql-staticalma-upgrade-postgresql-testalma-upgrade-postgresql-test-rpm-macros

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.