When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-contribUpgrade pgauditUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-pltcl | May 4, 2022 | Mar 4, 2022 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql14Upgrade postgresql15Upgrade postgresqlUpgrade postgresql13 | Mar 26, 2024 | Mar 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-static | Feb 23, 2023 | Mar 4, 2022 |
| Amazon_linux | — | Upgrade postgresql93Upgrade postgresql95Upgrade postgresql94Upgrade postgresql92Upgrade postgresql96 | Jan 25, 2023 | Nov 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 4, 2022 |
| Centos_linux | — | Upgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docsUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade pg_repack-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debuginfoUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-debuginfoUpgrade pg_repack-debuginfo | Dec 22, 2021 | Dec 21, 2021 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql12-serverUpgrade postgresql11-serverUpgrade postgresql96-serverUpgrade postgresql13-serverUpgrade postgresql10-serverUpgrade postgresql14-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 4, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-plperl | Feb 24, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresqlUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-test | Mar 2, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgres-decoderbufs | Dec 23, 2021 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1 | Mar 4, 2022 | Mar 4, 2022 |
| Redhat_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-testUpgrade pg_repackNo solution existsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltclUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade pgauditUpgrade postgresql-server-develUpgrade pg_repack-debugsourceUpgrade postgresql-contribUpgrade postgresql-docs-debuginfo | Dec 22, 2021 | Dec 21, 2021 |
| Rocky_linux | — | Upgrade postgresql-test-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade pg_repack-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-contribUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-debuginfo | Mar 5, 2024 | Mar 4, 2022 |
| Suse | — | Upgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade libecpg6-32bitUpgrade postgresql12-testUpgrade postgresql-plpythonUpgrade postgresql12Upgrade postgresql12-serverUpgrade postgresql14-contribUpgrade postgresql13-serverUpgrade postgresql13Upgrade postgresql12-plpythonUpgrade libpq5-32bitUpgrade postgresql10-docsUpgrade postgresql14-plpythonUpgrade postgresql14-docsUpgrade postgresqlUpgrade postgresql10-develUpgrade postgresql12-plperlUpgrade postgresql13-contribUpgrade postgresql-serverUpgrade libpq5Upgrade postgresql-develUpgrade postgresql13-llvmjitUpgrade postgresql10Upgrade postgresql10-plperlUpgrade postgresql96-plpythonUpgrade postgresql10-serverUpgrade postgresql12-server-develUpgrade postgresql10-plpythonUpgrade postgresql14-testUpgrade postgresql13-plperlUpgrade postgresql13-develUpgrade postgresql-pltclUpgrade postgresql14-develUpgrade postgresql96-pltclUpgrade postgresql12-llvmjitUpgrade postgresql14-server-develUpgrade postgresql12-contribUpgrade postgresql13-testUpgrade postgresql10-pltclUpgrade postgresql14-devel-miniUpgrade postgresql96-serverUpgrade postgresql14-serverUpgrade postgresql14Upgrade postgresql13-plpythonUpgrade postgresql12-pltclUpgrade postgresql13-pltclUpgrade postgresql10-testUpgrade postgresql96-docsUpgrade postgresql96Upgrade postgresql13-llvmjit-develUpgrade postgresql96-plperlUpgrade postgresql13-docsUpgrade postgresql10-contribUpgrade postgresql13-server-develUpgrade postgresql96-contribUpgrade postgresql12-docsUpgrade postgresql12-develUpgrade libecpg6Upgrade postgresql14-llvmjitUpgrade postgresql14-pltclUpgrade postgresql-server-develUpgrade postgresql14-plperl | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-9.5 (Ubuntu Pro) | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub