A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpq-develUpgrade libpq | May 13, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresqlUpgrade postgresql12Upgrade postgresql15Upgrade postgresql13 | Mar 26, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-contribUpgrade libpqUpgrade postgresql-docsUpgrade libpq-develUpgrade postgresql-pltclUpgrade postgresql-llvmjitUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-plpython2Upgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-server-develUpgrade libpq-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-debuginfo | Mar 5, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade libpq-debuginfoUpgrade libpq-debugsourceUpgrade libpqUpgrade libpq-develUpgrade libpq-devel-debuginfo | May 13, 2022 | Mar 2, 2022 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql11-serverUpgrade postgresql96-serverUpgrade postgresql12-serverUpgrade postgresql10-serverUpgrade postgresql13-serverUpgrade postgresql14-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-pltcl | Mar 2, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql | Feb 24, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade libpqUpgrade libpq-devel | May 18, 2022 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1Upgrade to the latest version of PostgreSQL | Mar 2, 2022 | Mar 2, 2022 |
| Redhat_linux | — | Upgrade libpq-develUpgrade libpq-debuginfoUpgrade libpq-devel-debuginfoUpgrade libpq-debugsourceUpgrade libpqNo solution exists | May 13, 2022 | Mar 2, 2022 |
| Rocky_linux | — | Upgrade libpqUpgrade libpq-develUpgrade libpq-debuginfoUpgrade libpq-debugsourceUpgrade libpq-devel-debuginfo | Mar 5, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade postgresql10-plpythonUpgrade postgresql10-serverUpgrade postgresql12-testUpgrade postgresql13-llvmjitUpgrade postgresql14-docsUpgrade postgresql12Upgrade postgresql10Upgrade postgresql14-serverUpgrade postgresql13-plpythonUpgrade postgresql14-llvmjitUpgrade postgresql14-testUpgrade postgresql-docsUpgrade postgresql13-develUpgrade libecpg6-32bitUpgrade postgresql-serverUpgrade libpq5Upgrade postgresql12-llvmjitUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql10-contribUpgrade postgresql14-devel-miniUpgrade postgresql96-plpythonUpgrade postgresql10-testUpgrade postgresql12-contribUpgrade postgresql13-server-develUpgrade postgresql14-pltclUpgrade postgresql96-serverUpgrade postgresql-pltclUpgrade postgresql14-plperlUpgrade postgresql13-serverUpgrade postgresql10-docsUpgrade postgresql13-plperlUpgrade postgresql-server-develUpgrade postgresql13-contribUpgrade postgresql12-pltclUpgrade postgresql96-docsUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql14-plpythonUpgrade postgresql13-llvmjit-develUpgrade postgresql12-docsUpgrade postgresql14Upgrade postgresql96-pltclUpgrade postgresql96-contribUpgrade postgresql14-server-develUpgrade postgresql13-pltclUpgrade postgresql96-plperlUpgrade postgresql14-contribUpgrade postgresql14-develUpgrade postgresql10-develUpgrade postgresql13Upgrade postgresql96Upgrade postgresql12-develUpgrade postgresql13-testUpgrade libpq5-32bitUpgrade postgresql12-server-develUpgrade postgresql12-serverUpgrade postgresql12-plperlUpgrade postgresql-develUpgrade postgresql10-pltclUpgrade postgresql13-docsUpgrade libecpg6Upgrade postgresql12-plpythonUpgrade postgresql10-plperl | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-13Upgrade postgresql-10 | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub