A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 16, 2020 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql14Upgrade postgresqlUpgrade postgresql15 | Jan 19, 2021 | Nov 16, 2020 |
| Amazon Linux Ami 2 | — | Upgrade postgresqlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-upgrade | Jun 24, 2021 | Nov 16, 2020 |
| Amazon_linux | — | Upgrade postgresql92Upgrade postgresql96Upgrade postgresql95 | Jan 15, 2021 | Nov 16, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 16, 2020 |
| Centos_linux | — | Upgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade pgaudit-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-develUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfo | Dec 21, 2020 | Nov 16, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 16, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-docs | Feb 22, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-plpython | Apr 30, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-libs | Mar 24, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-test | Dec 15, 2020 | Nov 16, 2020 |
| Oracle_linux | — | Upgrade postgresql-libsUpgrade postgresql-develUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresqlUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-plpythonUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-contribUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-pltclUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade rh-postgresql10-postgresql-serverUpgrade pgauditUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-upgrade-develUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-contribUpgrade rh-postgresql10-postgresql-plperl | Dec 23, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade postgresql-plpythonUpgrade postgresql-server-debuginfoUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-develUpgrade pgaudit-debuginfoNo solution existsUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-debuginfo | Dec 21, 2020 | Nov 16, 2020 |
| Rocky_linux | — | Upgrade pgauditUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsource | Mar 12, 2024 | Nov 16, 2020 |
| Suse | — | Upgrade postgresqlUpgrade postgresql12-contribUpgrade postgresql-plperlUpgrade postgresql96-plpythonUpgrade postgresql10Upgrade postgresql10-plperlUpgrade libecpg6Upgrade postgresql12-testUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql13-server-develUpgrade postgresql10-serverUpgrade postgresql-serverUpgrade libecpg6-32bitUpgrade postgresql13-develUpgrade libpq5Upgrade postgresql96-serverUpgrade postgresql-pltclUpgrade postgresql12-llvmjitUpgrade postgresql13-plpythonUpgrade postgresql-server-develUpgrade postgresql10-testUpgrade postgresql96Upgrade postgresql12-plpythonUpgrade postgresql12Upgrade postgresql10-plpythonUpgrade postgresql13-pltclUpgrade postgresql96-pltclUpgrade postgresql13-serverUpgrade postgresql12-plperlUpgrade postgresql12-pltclUpgrade postgresql10-develUpgrade postgresql10-docsUpgrade postgresql13Upgrade postgresql96-plperlUpgrade postgresql12-develUpgrade postgresql-plpythonUpgrade postgresql13-testUpgrade postgresql13-plperlUpgrade postgresql10-contribUpgrade postgresql96-docsUpgrade postgresql-llvmjitUpgrade postgresql10-pltclUpgrade libpq5-32bitUpgrade postgresql12-server-develUpgrade postgresql13-contribUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql96-contribUpgrade postgresql12-docsUpgrade postgresql13-docsUpgrade postgresql12-server | Dec 11, 2020 | Nov 16, 2020 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-10Upgrade postgresql-12 | Mar 22, 2023 | Nov 16, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub