When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macros | May 4, 2022 | Mar 4, 2022 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql15Upgrade postgresqlUpgrade postgresql12Upgrade postgresql14 | Mar 26, 2024 | Mar 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-static | Feb 23, 2023 | Mar 4, 2022 |
| Amazon_linux | — | Upgrade postgresql94Upgrade postgresql92Upgrade postgresql96Upgrade postgresql95Upgrade postgresql93 | Jan 25, 2023 | Nov 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 4, 2022 |
| Centos_linux | — | Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfo | Dec 22, 2021 | Dec 21, 2021 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql10-serverUpgrade postgresql96-serverUpgrade postgresql11-serverUpgrade postgresql13-serverUpgrade postgresql14-serverUpgrade postgresql12-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-server | Feb 24, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-contrib | Mar 2, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-contrib | Dec 23, 2021 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1 | Mar 4, 2022 | Mar 4, 2022 |
| Redhat_linux | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-staticUpgrade postgresql-testNo solution existsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3 | Dec 22, 2021 | Dec 21, 2021 |
| Rocky_linux | — | Upgrade pg_repack-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltclUpgrade postgresql-server-debuginfo | Mar 5, 2024 | Mar 4, 2022 |
| Suse | — | Upgrade postgresql13-llvmjitUpgrade postgresql13-develUpgrade postgresql12-plperlUpgrade postgresql12-testUpgrade postgresql14-testUpgrade postgresql96-plpythonUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql10-docsUpgrade postgresql14-plpythonUpgrade postgresql-plperlUpgrade postgresql10Upgrade postgresql13Upgrade libecpg6-32bitUpgrade postgresql10-develUpgrade postgresql14-docsUpgrade postgresql14-contribUpgrade postgresql12-plpythonUpgrade postgresql12Upgrade postgresql13-plperlUpgrade libpq5-32bitUpgrade postgresql-develUpgrade libpq5Upgrade postgresql10-plperlUpgrade postgresql10-serverUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql13-contribUpgrade postgresql12-server-develUpgrade postgresql10-plpythonUpgrade postgresqlUpgrade postgresql13-serverUpgrade postgresql12-serverUpgrade postgresql12-llvmjitUpgrade postgresql96-pltclUpgrade postgresql14-develUpgrade postgresql96-contribUpgrade postgresql14-devel-miniUpgrade postgresql13-llvmjit-develUpgrade postgresql12-develUpgrade postgresql13-plpythonUpgrade postgresql14-serverUpgrade postgresql12-pltclUpgrade postgresql14Upgrade postgresql14-server-develUpgrade postgresql96-plperlUpgrade postgresql10-testUpgrade libecpg6Upgrade postgresql13-testUpgrade postgresql13-pltclUpgrade postgresql96-serverUpgrade postgresql10-contribUpgrade postgresql96-docsUpgrade postgresql14-pltclUpgrade postgresql14-plperlUpgrade postgresql96Upgrade postgresql10-pltclUpgrade postgresql13-docsUpgrade postgresql14-llvmjitUpgrade postgresql12-contribUpgrade postgresql12-docsUpgrade postgresql-server-develUpgrade postgresql13-server-devel | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-13Upgrade postgresql-12Upgrade postgresql-9.5 (Ubuntu Pro) | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub