A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macros | May 4, 2022 | Oct 11, 2021 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresql15Upgrade postgresql | Mar 26, 2024 | Oct 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-contrib | Sep 28, 2023 | Oct 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 11, 2021 |
| Centos_linux | — | Upgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-debugsourceUpgrade postgresql-staticUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-test-debuginfoUpgrade pgaudit-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsource | Jun 10, 2021 | Jun 9, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Oct 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-contrib | Dec 28, 2021 | Oct 11, 2021 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresqlUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-docsUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresqlUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-server-develUpgrade postgresql-testUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-develUpgrade postgresql-upgrade-devel | Jun 11, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Redhat_linux | — | Upgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverNo solution existsUpgrade postgresql-testUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade postgresql-debuginfo | Jun 10, 2021 | Jun 9, 2021 |
| Rocky_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-debuginfoUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-docsUpgrade pgauditUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3 | May 5, 2022 | Oct 11, 2021 |
| Suse | — | Upgrade libecpg6Upgrade postgresql14-server-develUpgrade postgresql13-pltclUpgrade postgresql13-serverUpgrade postgresql12-server-develUpgrade postgresql14-docsUpgrade postgresql13Upgrade postgresql10-plperlUpgrade postgresql13-llvmjit-develUpgrade postgresql12-serverUpgrade postgresql10-docsUpgrade postgresql14Upgrade postgresql10-pltclUpgrade postgresql12-plpythonUpgrade postgresql12-develUpgrade postgresql14-contribUpgrade postgresql12-contribUpgrade postgresql10-develUpgrade postgresql12-testUpgrade postgresql12-pltclUpgrade libpq5-32bitUpgrade postgresql14-plpythonUpgrade postgresql13-contribUpgrade postgresql12-plperlUpgrade postgresql13-plperlUpgrade postgresql10-plpythonUpgrade postgresql13-llvmjitUpgrade postgresql14-develUpgrade postgresql14-plperlUpgrade postgresql14-pltclUpgrade postgresql13-docsUpgrade postgresql13-server-develUpgrade postgresql12-docsUpgrade postgresql10-testUpgrade postgresql13-testUpgrade postgresql10Upgrade postgresql12Upgrade postgresql14-serverUpgrade postgresql13-plpythonUpgrade postgresql10-contribUpgrade postgresql10-serverUpgrade postgresql12-llvmjitUpgrade libpq5Upgrade postgresql13-devel | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-13 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub