A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 16, 2020 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql14Upgrade postgresql15Upgrade postgresql | Jan 19, 2021 | Nov 16, 2020 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-test | Jun 24, 2021 | Nov 16, 2020 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql92Upgrade postgresql96 | Jan 15, 2021 | Nov 16, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 16, 2020 |
| Centos_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-libsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-contrib-debuginfoUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfo | Dec 21, 2020 | Nov 16, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 16, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-plpython | Feb 22, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-testUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-plpython | Apr 30, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-contrib | Mar 24, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-test | Dec 15, 2020 | Nov 16, 2020 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-libsUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresqlUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-contribUpgrade postgresql-develUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-serverUpgrade pgauditUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-libsUpgrade postgresqlUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-server-syspaths | Dec 23, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-libsUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclNo solution existsUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgresql-test-debuginfoUpgrade pgauditUpgrade pgaudit-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfo | Dec 21, 2020 | Nov 16, 2020 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgres-decoderbufs-debuginfo | Mar 12, 2024 | Nov 16, 2020 |
| Suse | — | Upgrade postgresql10-docsUpgrade postgresql12-serverUpgrade postgresql-develUpgrade postgresql12-server-develUpgrade postgresql13-testUpgrade postgresql-contribUpgrade postgresql12-develUpgrade postgresql96-plperlUpgrade postgresql10-develUpgrade postgresql13-contribUpgrade postgresql13-plperlUpgrade postgresql10-pltclUpgrade postgresql13-serverUpgrade postgresql13-docsUpgrade postgresql96-contribUpgrade postgresql96-pltclUpgrade postgresql12-docsUpgrade libpq5-32bitUpgrade postgresql12-plperlUpgrade postgresql96-docsUpgrade postgresql13Upgrade postgresql10-contribUpgrade postgresql-plpythonUpgrade postgresql13-pltclUpgrade postgresql-llvmjitUpgrade postgresql12-pltclUpgrade postgresql-docsUpgrade postgresql10-serverUpgrade libpq5Upgrade postgresql12-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql12Upgrade postgresql10-plperlUpgrade libecpg6-32bitUpgrade postgresql13-develUpgrade postgresql96-serverUpgrade postgresql12-llvmjitUpgrade postgresql-server-develUpgrade postgresql10-testUpgrade postgresql96Upgrade postgresql12-plpythonUpgrade postgresql10-plpythonUpgrade postgresql96-plpythonUpgrade postgresql-testUpgrade postgresql12-contribUpgrade postgresql-plperlUpgrade postgresql10Upgrade libecpg6Upgrade postgresql13-server-develUpgrade postgresql13-plpythonUpgrade postgresql-pltcl | Dec 11, 2020 | Nov 16, 2020 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-9.5Upgrade postgresql-12 | Mar 22, 2023 | Nov 16, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub