A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Nov 16, 2020 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql15Upgrade postgresql12Upgrade postgresql14 | Jan 19, 2021 | Nov 16, 2020 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-libs | Jun 24, 2021 | Nov 16, 2020 |
| Amazon_linux | — | Upgrade postgresql92Upgrade postgresql96Upgrade postgresql95 | Jan 15, 2021 | Nov 16, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 16, 2020 |
| Centos_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-docsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-testUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltclUpgrade postgresql-server-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-libsUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpythonUpgrade postgresql-server-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade pgauditUpgrade postgresql-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel | Dec 21, 2020 | Nov 16, 2020 |
| Debian | — | Upgrade postgresql-13 | Dec 3, 2020 | Nov 16, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Dec 7, 2020 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-pltcl | Feb 22, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql | Apr 30, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-plperl | Mar 24, 2021 | Nov 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-test | Dec 15, 2020 | Nov 16, 2020 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql-upgrade-develUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-plperlUpgrade pgauditUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresqlUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-plpythonUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-develUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-plperlUpgrade rh-postgresql10-postgresql-test | Dec 23, 2020 | Nov 12, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 13.1 | Nov 16, 2020 | Nov 16, 2020 |
| Redhat_linux | — | Upgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-develUpgrade pgaudit-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-libsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-pltcl-debuginfoNo solution existsUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsource | Dec 21, 2020 | Nov 16, 2020 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgres-decoderbufs-debuginfo | Mar 12, 2024 | Nov 16, 2020 |
| Suse | — | Upgrade libecpg6Upgrade postgresqlUpgrade postgresql12-llvmjitUpgrade postgresql12-plpythonUpgrade postgresql10-plperlUpgrade postgresql10-testUpgrade postgresql10-serverUpgrade postgresql96-plpythonUpgrade postgresql13-plpythonUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql13-develUpgrade postgresql-server-develUpgrade postgresql13-server-develUpgrade postgresql12-contribUpgrade postgresql-pltclUpgrade postgresql12Upgrade postgresql10Upgrade libpq5Upgrade postgresql96-serverUpgrade postgresql96Upgrade postgresql10-plpythonUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql12-testUpgrade libecpg6-32bitUpgrade postgresql96-contribUpgrade postgresql10-docsUpgrade postgresql13-docsUpgrade postgresql10-develUpgrade postgresql96-pltclUpgrade libpq5-32bitUpgrade postgresql96-docsUpgrade postgresql10-contribUpgrade postgresql-llvmjitUpgrade postgresql10-pltclUpgrade postgresql12-serverUpgrade postgresql13-testUpgrade postgresql13Upgrade postgresql12-develUpgrade postgresql96-plperlUpgrade postgresql-plpythonUpgrade postgresql12-pltclUpgrade postgresql13-plperlUpgrade postgresql13-contribUpgrade postgresql-develUpgrade postgresql12-server-develUpgrade postgresql-contribUpgrade postgresql12-docsUpgrade postgresql13-serverUpgrade postgresql12-plperlUpgrade postgresql13-pltcl | Dec 11, 2020 | Nov 16, 2020 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-12Upgrade postgresql-10 | Mar 22, 2023 | Nov 16, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub