A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 16, 2020 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresqlUpgrade postgresql14Upgrade postgresql12 | Jan 19, 2021 | Nov 16, 2020 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-test | Jun 24, 2021 | Nov 16, 2020 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql92Upgrade postgresql96 | Jan 15, 2021 | Nov 16, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 16, 2020 |
| Centos_linux | — | Upgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-develUpgrade postgresql-server-develUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-libs | Dec 21, 2020 | Nov 16, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 16, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-docs | Feb 22, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-plperl | Apr 30, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-devel | Mar 24, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-plpython | Dec 15, 2020 | Nov 16, 2020 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-develUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-libsUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade rh-postgresql10-postgresqlUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-serverUpgrade postgresqlUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-plperlUpgrade pgauditUpgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-plpython3 | Dec 23, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade postgresql-staticUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docs-debuginfoNo solution existsUpgrade pgaudit-debuginfo | Dec 21, 2020 | Nov 16, 2020 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade pgauditUpgrade postgres-decoderbufs | Mar 12, 2024 | Nov 16, 2020 |
| Suse | — | Upgrade postgresql96-serverUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql13-plpythonUpgrade postgresql12-plpythonUpgrade postgresql12-llvmjitUpgrade postgresql13-develUpgrade postgresql13-server-develUpgrade postgresql12Upgrade postgresql10-plpythonUpgrade postgresql12-contribUpgrade postgresql10Upgrade postgresql-pltclUpgrade postgresql96Upgrade postgresql10-serverUpgrade libecpg6Upgrade postgresql12-testUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql10-plperlUpgrade postgresql10-testUpgrade postgresql96-plpythonUpgrade postgresql13Upgrade postgresql13-contribUpgrade postgresql13-testUpgrade postgresql13-plperlUpgrade postgresql12-docsUpgrade postgresql96-pltclUpgrade postgresql-plpythonUpgrade postgresql12-pltclUpgrade postgresql13-serverUpgrade postgresql10-contribUpgrade libpq5-32bitUpgrade postgresql10-docsUpgrade postgresql12-serverUpgrade postgresql96-docsUpgrade postgresql12-develUpgrade postgresql10-develUpgrade postgresql-llvmjitUpgrade postgresql13-pltclUpgrade postgresql12-plperlUpgrade postgresql96-plperlUpgrade postgresql12-server-develUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql10-pltclUpgrade postgresql13-docsUpgrade postgresql96-contrib | Dec 11, 2020 | Nov 16, 2020 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-9.5 | Mar 22, 2023 | Nov 16, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub