When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-docsUpgrade postgresql-plperlUpgrade pgauditUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade pg_repackUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macros | May 4, 2022 | Mar 4, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql12Upgrade postgresql15Upgrade postgresqlUpgrade postgresql13 | Mar 26, 2024 | Mar 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-static | Feb 23, 2023 | Mar 4, 2022 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql93Upgrade postgresql92Upgrade postgresql96Upgrade postgresql94 | Jan 25, 2023 | Nov 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 4, 2022 |
| Centos_linux | — | Upgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-staticUpgrade postgresql-serverUpgrade pgauditUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgresql-contribUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-plpython3 | Dec 22, 2021 | Dec 21, 2021 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql13-serverUpgrade postgresql10-serverUpgrade postgresql14-serverUpgrade postgresql11-serverUpgrade postgresql96-serverUpgrade postgresql12-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-devel | Feb 24, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-pltcl | Mar 2, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-server-devel | Dec 23, 2021 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1 | Mar 4, 2022 | Mar 4, 2022 |
| Redhat_linux | — | Upgrade postgresql-contrib-debuginfoUpgrade postgresql-pltclUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade pg_repack-debugsourceUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade pg_repackUpgrade postgresqlUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperlNo solution existsUpgrade postgresql-debugsourceUpgrade postgresql-docs | Dec 22, 2021 | Dec 21, 2021 |
| Rocky_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-contribUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresqlUpgrade postgres-decoderbufs-debuginfo | Mar 5, 2024 | Mar 4, 2022 |
| Suse | — | Upgrade postgresql14-plperlUpgrade postgresql10-contribUpgrade postgresql14-pltclUpgrade postgresql12-develUpgrade postgresql13-testUpgrade postgresql96-plperlUpgrade postgresql96-serverUpgrade postgresql13-server-develUpgrade postgresql13-plpythonUpgrade postgresql13-docsUpgrade postgresql10-pltclUpgrade postgresql14-server-develUpgrade postgresql13-llvmjit-develUpgrade postgresql96-contribUpgrade postgresql13-pltclUpgrade postgresql14-llvmjitUpgrade postgresql12-pltclUpgrade postgresql96Upgrade postgresql96-docsUpgrade postgresql12-docsUpgrade postgresql12-contribUpgrade postgresql14-devel-miniUpgrade postgresql14Upgrade postgresql10-testUpgrade libecpg6Upgrade postgresql14-serverUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql10-docsUpgrade postgresql13-contribUpgrade postgresql-develUpgrade postgresql96-pltclUpgrade postgresql13Upgrade postgresql12-llvmjitUpgrade postgresql12-serverUpgrade libpq5-32bitUpgrade postgresql-pltclUpgrade postgresql14-plpythonUpgrade postgresql10-serverUpgrade postgresql12Upgrade libecpg6-32bitUpgrade postgresql-plperlUpgrade postgresql14-testUpgrade postgresql-plpythonUpgrade postgresql13-plperlUpgrade postgresql-docsUpgrade postgresql12-testUpgrade postgresqlUpgrade postgresql96-plpythonUpgrade postgresql12-plperlUpgrade postgresql13-serverUpgrade postgresql14-docsUpgrade postgresql14-contribUpgrade postgresql12-plpythonUpgrade postgresql10-plpythonUpgrade postgresql-contribUpgrade postgresql12-server-develUpgrade postgresql14-develUpgrade libpq5Upgrade postgresql10-plperlUpgrade postgresql13-develUpgrade postgresql13-llvmjitUpgrade postgresql10-develUpgrade postgresql10 | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-9.5 (Ubuntu Pro) | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub