A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 16, 2020 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresqlUpgrade postgresql12 | Jan 19, 2021 | Nov 16, 2020 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-upgradeUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-static | Jun 24, 2021 | Nov 16, 2020 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql96Upgrade postgresql92 | Jan 15, 2021 | Nov 16, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 16, 2020 |
| Centos_linux | — | Upgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-plperl-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfo | Dec 21, 2020 | Nov 16, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 16, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-docs | Feb 22, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-contrib | Apr 30, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-contribUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plpython | Mar 24, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-test | Dec 15, 2020 | Nov 16, 2020 |
| Oracle_linux | — | Upgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-libsUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresqlUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-pltclUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-develUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-testUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade pgaudit | Dec 23, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade pgaudit-debuginfoNo solution existsUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-devel | Dec 21, 2020 | Nov 16, 2020 |
| Rocky_linux | — | Upgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgres-decoderbufsUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsource | Mar 12, 2024 | Nov 16, 2020 |
| Suse | — | Upgrade postgresql96Upgrade postgresql96-serverUpgrade postgresql10-plpythonUpgrade postgresql13-develUpgrade postgresql12-plpythonUpgrade postgresql-docsUpgrade postgresql12-llvmjitUpgrade libecpg6-32bitUpgrade postgresql10-testUpgrade postgresql-server-develUpgrade postgresql10-plperlUpgrade postgresql13-plpythonUpgrade postgresql96-plpythonUpgrade postgresql12-contribUpgrade postgresql12-testUpgrade libpq5Upgrade postgresql10-serverUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql13-server-develUpgrade postgresql10Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql12Upgrade libecpg6Upgrade postgresql13-testUpgrade postgresql10-contribUpgrade postgresql10-pltclUpgrade postgresql13-serverUpgrade postgresql13-docsUpgrade postgresql96-contribUpgrade postgresql12-server-develUpgrade postgresql12-develUpgrade postgresql-develUpgrade postgresql96-plperlUpgrade postgresql13-plperlUpgrade postgresql13Upgrade postgresql96-docsUpgrade postgresql12-pltclUpgrade libpq5-32bitUpgrade postgresql-llvmjitUpgrade postgresql12-docsUpgrade postgresql12-serverUpgrade postgresql10-docsUpgrade postgresql10-develUpgrade postgresql12-plperlUpgrade postgresql96-pltclUpgrade postgresql-plpythonUpgrade postgresql13-pltclUpgrade postgresql13-contribUpgrade postgresql-contrib | Dec 11, 2020 | Nov 16, 2020 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-10Upgrade postgresql-12 | Mar 22, 2023 | Nov 16, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub