A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libpqalma-upgrade-libpq-devel | May 13, 2022 | Mar 2, 2022 | |
| Alpine Linux | alpine-linux-upgrade-postgresqlalpine-linux-upgrade-postgresql13alpine-linux-upgrade-postgresql14alpine-linux-upgrade-postgresql12alpine-linux-upgrade-postgresql15 | Mar 26, 2024 | Mar 2, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libpqamazon-linux-ami-2-upgrade-libpq-debuginfoamazon-linux-ami-2-upgrade-libpq-develamazon-linux-ami-2-upgrade-postgresqlamazon-linux-ami-2-upgrade-postgresql-contribamazon-linux-ami-2-upgrade-postgresql-debuginfoamazon-linux-ami-2-upgrade-postgresql-docsamazon-linux-ami-2-upgrade-postgresql-llvmjitamazon-linux-ami-2-upgrade-postgresql-plperlamazon-linux-ami-2-upgrade-postgresql-plpython2amazon-linux-ami-2-upgrade-postgresql-plpython3amazon-linux-ami-2-upgrade-postgresql-pltclamazon-linux-ami-2-upgrade-postgresql-private-develamazon-linux-ami-2-upgrade-postgresql-private-libsamazon-linux-ami-2-upgrade-postgresql-serveramazon-linux-ami-2-upgrade-postgresql-server-develamazon-linux-ami-2-upgrade-postgresql-staticamazon-linux-ami-2-upgrade-postgresql-testamazon-linux-ami-2-upgrade-postgresql-test-rpm-macrosamazon-linux-ami-2-upgrade-postgresql-upgradeamazon-linux-ami-2-upgrade-postgresql-upgrade-devel | Mar 5, 2024 | Mar 2, 2022 | |
| Centos_linux | — | centos-upgrade-libpqcentos-upgrade-libpq-debuginfocentos-upgrade-libpq-debugsourcecentos-upgrade-libpq-develcentos-upgrade-libpq-devel-debuginfo | May 13, 2022 | Mar 2, 2022 |
| Debian | debian-upgrade-postgresql-13 | Nov 29, 2021 | Nov 29, 2021 | |
| Freebsd | freebsd-upgrade-package-postgresql14-serverfreebsd-upgrade-package-postgresql13-serverfreebsd-upgrade-package-postgresql12-serverfreebsd-upgrade-package-postgresql11-serverfreebsd-upgrade-package-postgresql10-serverfreebsd-upgrade-package-postgresql96-server | Nov 4, 2022 | Nov 10, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-postgresql | Nov 23, 2022 | Mar 2, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-postgresqlhuawei-euleros-2_0_sp3-upgrade-postgresql-contribhuawei-euleros-2_0_sp3-upgrade-postgresql-develhuawei-euleros-2_0_sp3-upgrade-postgresql-docshuawei-euleros-2_0_sp3-upgrade-postgresql-libshuawei-euleros-2_0_sp3-upgrade-postgresql-plperlhuawei-euleros-2_0_sp3-upgrade-postgresql-plpythonhuawei-euleros-2_0_sp3-upgrade-postgresql-pltclhuawei-euleros-2_0_sp3-upgrade-postgresql-serverhuawei-euleros-2_0_sp3-upgrade-postgresql-test | May 25, 2022 | Mar 2, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-postgresqlhuawei-euleros-2_0_sp5-upgrade-postgresql-contribhuawei-euleros-2_0_sp5-upgrade-postgresql-develhuawei-euleros-2_0_sp5-upgrade-postgresql-docshuawei-euleros-2_0_sp5-upgrade-postgresql-libshuawei-euleros-2_0_sp5-upgrade-postgresql-plperlhuawei-euleros-2_0_sp5-upgrade-postgresql-plpythonhuawei-euleros-2_0_sp5-upgrade-postgresql-pltclhuawei-euleros-2_0_sp5-upgrade-postgresql-serverhuawei-euleros-2_0_sp5-upgrade-postgresql-test | Mar 2, 2022 | Feb 23, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-postgresqlhuawei-euleros-2_0_sp8-upgrade-postgresql-contribhuawei-euleros-2_0_sp8-upgrade-postgresql-develhuawei-euleros-2_0_sp8-upgrade-postgresql-docshuawei-euleros-2_0_sp8-upgrade-postgresql-libshuawei-euleros-2_0_sp8-upgrade-postgresql-plperlhuawei-euleros-2_0_sp8-upgrade-postgresql-plpythonhuawei-euleros-2_0_sp8-upgrade-postgresql-pltclhuawei-euleros-2_0_sp8-upgrade-postgresql-serverhuawei-euleros-2_0_sp8-upgrade-postgresql-test | Feb 24, 2022 | Feb 23, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-libpqoracle-linux-upgrade-libpq-devel | May 18, 2022 | Nov 11, 2021 |
| Postgres | postgres-upgrade-14_1postgres-upgrade-latest | Mar 2, 2022 | Mar 2, 2022 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libpqredhat-upgrade-libpq-debuginforedhat-upgrade-libpq-debugsourceredhat-upgrade-libpq-develredhat-upgrade-libpq-devel-debuginfo | May 13, 2022 | Mar 2, 2022 | |
| Rocky_linux | rocky-upgrade-libpqrocky-upgrade-libpq-debuginforocky-upgrade-libpq-debugsourcerocky-upgrade-libpq-develrocky-upgrade-libpq-devel-debuginfo | Mar 5, 2024 | Mar 2, 2022 | |
| Suse | — | suse-upgrade-libecpg6suse-upgrade-libecpg6-32bitsuse-upgrade-libpq5suse-upgrade-libpq5-32bitsuse-upgrade-postgresqlsuse-upgrade-postgresql-contribsuse-upgrade-postgresql-develsuse-upgrade-postgresql-docssuse-upgrade-postgresql-plperlsuse-upgrade-postgresql-plpythonsuse-upgrade-postgresql-pltclsuse-upgrade-postgresql-serversuse-upgrade-postgresql-server-develsuse-upgrade-postgresql10suse-upgrade-postgresql10-contribsuse-upgrade-postgresql10-develsuse-upgrade-postgresql10-docssuse-upgrade-postgresql10-plperlsuse-upgrade-postgresql10-plpythonsuse-upgrade-postgresql10-pltclsuse-upgrade-postgresql10-serversuse-upgrade-postgresql10-testsuse-upgrade-postgresql12suse-upgrade-postgresql12-contribsuse-upgrade-postgresql12-develsuse-upgrade-postgresql12-docssuse-upgrade-postgresql12-llvmjitsuse-upgrade-postgresql12-plperlsuse-upgrade-postgresql12-plpythonsuse-upgrade-postgresql12-pltclsuse-upgrade-postgresql12-serversuse-upgrade-postgresql12-server-develsuse-upgrade-postgresql12-testsuse-upgrade-postgresql13suse-upgrade-postgresql13-contribsuse-upgrade-postgresql13-develsuse-upgrade-postgresql13-docssuse-upgrade-postgresql13-llvmjitsuse-upgrade-postgresql13-llvmjit-develsuse-upgrade-postgresql13-plperlsuse-upgrade-postgresql13-plpythonsuse-upgrade-postgresql13-pltclsuse-upgrade-postgresql13-serversuse-upgrade-postgresql13-server-develsuse-upgrade-postgresql13-testsuse-upgrade-postgresql14suse-upgrade-postgresql14-contribsuse-upgrade-postgresql14-develsuse-upgrade-postgresql14-devel-minisuse-upgrade-postgresql14-docssuse-upgrade-postgresql14-llvmjitsuse-upgrade-postgresql14-plperlsuse-upgrade-postgresql14-plpythonsuse-upgrade-postgresql14-pltclsuse-upgrade-postgresql14-serversuse-upgrade-postgresql14-server-develsuse-upgrade-postgresql14-testsuse-upgrade-postgresql96suse-upgrade-postgresql96-contribsuse-upgrade-postgresql96-docssuse-upgrade-postgresql96-plperlsuse-upgrade-postgresql96-plpythonsuse-upgrade-postgresql96-pltclsuse-upgrade-postgresql96-server | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | ubuntu-pro-upgrade-postgresql-9-5ubuntu-upgrade-postgresql-10ubuntu-upgrade-postgresql-12ubuntu-upgrade-postgresql-13 | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub