A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpqUpgrade libpq-devel | May 13, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql15Upgrade postgresql13Upgrade postgresqlUpgrade postgresql14 | Mar 26, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-pltclUpgrade libpq-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-staticUpgrade libpqUpgrade postgresql-plpython2Upgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade libpq-debuginfoUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-server | Mar 5, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade libpq-debugsourceUpgrade libpq-debuginfoUpgrade libpq-develUpgrade libpqUpgrade libpq-devel-debuginfo | May 13, 2022 | Mar 2, 2022 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql12-serverUpgrade postgresql11-serverUpgrade postgresql96-serverUpgrade postgresql10-serverUpgrade postgresql13-serverUpgrade postgresql14-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-plpython | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-contrib | Mar 2, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-libs | Feb 24, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade libpq-develUpgrade libpq | May 18, 2022 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1Upgrade to the latest version of PostgreSQL | Mar 2, 2022 | Mar 2, 2022 |
| Redhat_linux | — | Upgrade libpq-develUpgrade libpq-debuginfoUpgrade libpq-devel-debuginfoUpgrade libpq-debugsourceUpgrade libpqNo solution exists | May 13, 2022 | Mar 2, 2022 |
| Rocky_linux | — | Upgrade libpq-debuginfoUpgrade libpqUpgrade libpq-develUpgrade libpq-debugsourceUpgrade libpq-devel-debuginfo | Mar 5, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade postgresql12-server-develUpgrade postgresql12-plperlUpgrade postgresql12-plpythonUpgrade postgresql12-docsUpgrade postgresql13-serverUpgrade postgresql13-plperlUpgrade postgresql96Upgrade postgresql12-develUpgrade postgresql10-docsUpgrade postgresql-server-develUpgrade postgresql10-plperlUpgrade postgresql13-contribUpgrade postgresql12-pltclUpgrade postgresql14-server-develUpgrade postgresql10-develUpgrade postgresql13-testUpgrade postgresql10-pltclUpgrade postgresql-develUpgrade postgresql14-develUpgrade postgresql12-serverUpgrade postgresql14Upgrade libecpg6Upgrade postgresql96-pltclUpgrade postgresql13-docsUpgrade postgresql13Upgrade postgresql96-contribUpgrade postgresql13-pltclUpgrade postgresql14-plperlUpgrade postgresql13-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql96-plperlUpgrade libpq5-32bitUpgrade postgresql14-plpythonUpgrade postgresql96-docsUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql10Upgrade postgresql14-serverUpgrade postgresql14-docsUpgrade postgresql-plperlUpgrade postgresql13-plpythonUpgrade postgresql10-serverUpgrade postgresql12-testUpgrade libecpg6-32bitUpgrade postgresql-docsUpgrade postgresql14-testUpgrade libpq5Upgrade postgresql14-llvmjitUpgrade postgresql14-devel-miniUpgrade postgresql96-serverUpgrade postgresql12Upgrade postgresql13-server-develUpgrade postgresql12-contribUpgrade postgresql10-testUpgrade postgresql14-pltclUpgrade postgresqlUpgrade postgresql10-contribUpgrade postgresql13-develUpgrade postgresql-serverUpgrade postgresql10-plpythonUpgrade postgresql12-llvmjitUpgrade postgresql-pltclUpgrade postgresql13-llvmjitUpgrade postgresql96-plpython | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-13Upgrade postgresql-9.5 (Ubuntu Pro) | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub