When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-contribUpgrade pg_repackUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-pltcl | May 4, 2022 | Mar 4, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql12Upgrade postgresql15Upgrade postgresql13Upgrade postgresql | Mar 26, 2024 | Mar 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-upgrade | Feb 23, 2023 | Mar 4, 2022 |
| Amazon_linux | — | Upgrade postgresql96Upgrade postgresql92Upgrade postgresql94Upgrade postgresql93Upgrade postgresql95 | Jan 25, 2023 | Nov 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 4, 2022 |
| Centos_linux | — | Upgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade pgauditUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-test | Dec 22, 2021 | Dec 21, 2021 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql13-serverUpgrade postgresql11-serverUpgrade postgresql96-serverUpgrade postgresql10-serverUpgrade postgresql14-serverUpgrade postgresql12-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-devel | Feb 24, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plpython | Mar 2, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-pltclUpgrade postgresql-plpython3 | Dec 23, 2021 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1 | Mar 4, 2022 | Mar 4, 2022 |
| Redhat_linux | — | No solution existsUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade pg_repack | Dec 22, 2021 | Dec 21, 2021 |
| Rocky_linux | — | Upgrade pg_repackUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql-test-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3 | Mar 5, 2024 | Mar 4, 2022 |
| Suse | — | Upgrade postgresql14-serverUpgrade postgresql13-testUpgrade postgresql96Upgrade libecpg6Upgrade postgresql96-plperlUpgrade postgresql13-plpythonUpgrade postgresql14Upgrade postgresql14-devel-miniUpgrade postgresql10-testUpgrade postgresql12-docsUpgrade postgresql13-server-develUpgrade postgresql13-docsUpgrade postgresql14-server-develUpgrade postgresql12-pltclUpgrade postgresql-server-develUpgrade postgresql14-llvmjitUpgrade postgresql96-contribUpgrade postgresql10-contribUpgrade postgresql13-pltclUpgrade postgresql12-contribUpgrade postgresql14-plperlUpgrade postgresql96-docsUpgrade postgresql96-serverUpgrade postgresql12-develUpgrade postgresql14-pltclUpgrade postgresql10-pltclUpgrade postgresql13-llvmjit-develUpgrade postgresql12Upgrade postgresql-serverUpgrade postgresql13Upgrade postgresql12-server-develUpgrade postgresql10-plpythonUpgrade postgresql-contribUpgrade libpq5Upgrade postgresql10-serverUpgrade postgresql-docsUpgrade postgresql13-contribUpgrade postgresql10-develUpgrade postgresql10Upgrade postgresql12-testUpgrade postgresql13-serverUpgrade libecpg6-32bitUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql10-plperlUpgrade postgresql12-plpythonUpgrade postgresql14-contribUpgrade postgresql14-docsUpgrade libpq5-32bitUpgrade postgresql10-docsUpgrade postgresql14-plpythonUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql14-develUpgrade postgresql96-pltclUpgrade postgresql13-develUpgrade postgresql13-llvmjitUpgrade postgresql96-plpythonUpgrade postgresql13-plperlUpgrade postgresqlUpgrade postgresql12-plperlUpgrade postgresql14-testUpgrade postgresql12-serverUpgrade postgresql12-llvmjit | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-13Upgrade postgresql-10 | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub