A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpqUpgrade libpq-devel | May 13, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresqlUpgrade postgresql13Upgrade postgresql15Upgrade postgresql12 | Mar 26, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-private-libsUpgrade libpq-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade libpq-develUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2Upgrade postgresql-docsUpgrade postgresql-contribUpgrade libpqUpgrade postgresql-llvmjit | Mar 5, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade libpq-debugsourceUpgrade libpq-debuginfoUpgrade libpq-devel-debuginfoUpgrade libpq-develUpgrade libpq | May 13, 2022 | Mar 2, 2022 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql13-serverUpgrade postgresql14-serverUpgrade postgresql10-serverUpgrade postgresql96-serverUpgrade postgresql12-serverUpgrade postgresql11-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-testUpgrade postgresql-contrib | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-devel | Mar 2, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql | Feb 24, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade libpq-develUpgrade libpq | May 18, 2022 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1 | Mar 2, 2022 | Mar 2, 2022 |
| Redhat_linux | — | No solution existsUpgrade libpq-debugsourceUpgrade libpqUpgrade libpq-devel-debuginfoUpgrade libpq-develUpgrade libpq-debuginfo | May 13, 2022 | Mar 2, 2022 |
| Rocky_linux | — | Upgrade libpq-devel-debuginfoUpgrade libpq-debugsourceUpgrade libpqUpgrade libpq-debuginfoUpgrade libpq-devel | Mar 5, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade postgresql14-develUpgrade libecpg6Upgrade postgresql96-plperlUpgrade postgresql13-docsUpgrade postgresql-develUpgrade postgresql14-contribUpgrade postgresql13Upgrade postgresql14Upgrade postgresql-plpythonUpgrade postgresql13-llvmjit-develUpgrade postgresql14-plperlUpgrade postgresql13-plperlUpgrade postgresql-contribUpgrade postgresql96-docsUpgrade postgresql12-pltclUpgrade postgresql13-pltclUpgrade libpq5-32bitUpgrade postgresql12-plperlUpgrade postgresql12-server-develUpgrade postgresql12-docsUpgrade postgresql14-plpythonUpgrade postgresql10-pltclUpgrade postgresql10-docsUpgrade postgresql-server-develUpgrade postgresql13-serverUpgrade postgresql12-develUpgrade postgresql13-contribUpgrade postgresql10-plperlUpgrade postgresql13-testUpgrade postgresql96Upgrade postgresql12-plpythonUpgrade postgresql14-server-develUpgrade postgresql10-develUpgrade postgresql96-pltclUpgrade postgresql12-serverUpgrade postgresql96-contribUpgrade postgresql10-testUpgrade libpq5Upgrade postgresql14-llvmjitUpgrade postgresqlUpgrade postgresql10-contribUpgrade postgresql-docsUpgrade postgresql14-testUpgrade postgresql96-plpythonUpgrade postgresql14-devel-miniUpgrade postgresql-plperlUpgrade libecpg6-32bitUpgrade postgresql12-llvmjitUpgrade postgresql10-plpythonUpgrade postgresql10-serverUpgrade postgresql13-plpythonUpgrade postgresql14-docsUpgrade postgresql10Upgrade postgresql12-testUpgrade postgresql-serverUpgrade postgresql13-develUpgrade postgresql12-contribUpgrade postgresql-pltclUpgrade postgresql13-server-develUpgrade postgresql96-serverUpgrade postgresql14-pltclUpgrade postgresql13-llvmjitUpgrade postgresql14-serverUpgrade postgresql12 | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-9.5 (Ubuntu Pro) | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub