A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpq-develUpgrade libpq | May 13, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresqlUpgrade postgresql12Upgrade postgresql13 | Mar 26, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade libpq-debuginfoUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-upgrade-develUpgrade libpqUpgrade postgresql-plpython2Upgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade libpq-develUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-llvmjit | Mar 5, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade libpq-debugsourceUpgrade libpq-debuginfoUpgrade libpq-devel-debuginfoUpgrade libpqUpgrade libpq-devel | May 13, 2022 | Mar 2, 2022 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql12-serverUpgrade postgresql96-serverUpgrade postgresql11-serverUpgrade postgresql10-serverUpgrade postgresql14-serverUpgrade postgresql13-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plpython | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-pltcl | Mar 2, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql | Feb 24, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade libpqUpgrade libpq-devel | May 18, 2022 | Nov 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 14.1Upgrade to the latest version of PostgreSQL | Mar 2, 2022 | Mar 2, 2022 |
| Redhat_linux | — | Upgrade libpqUpgrade libpq-debugsourceUpgrade libpq-devel-debuginfoNo solution existsUpgrade libpq-develUpgrade libpq-debuginfo | May 13, 2022 | Mar 2, 2022 |
| Rocky_linux | — | Upgrade libpq-debugsourceUpgrade libpq-devel-debuginfoUpgrade libpqUpgrade libpq-debuginfoUpgrade libpq-devel | Mar 5, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade postgresql96Upgrade postgresql13-testUpgrade postgresql-server-develUpgrade postgresql14-server-develUpgrade postgresql10-docsUpgrade postgresql13-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql13-contribUpgrade libpq5-32bitUpgrade postgresql13-plperlUpgrade postgresql-plpythonUpgrade postgresql12-docsUpgrade postgresql12-plperlUpgrade postgresql12-serverUpgrade postgresql12-server-develUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql13-docsUpgrade postgresql13-pltclUpgrade postgresql10-develUpgrade postgresql10-plperlUpgrade postgresql12-develUpgrade postgresql10-pltclUpgrade postgresql14-plperlUpgrade postgresql96-plperlUpgrade postgresql14-develUpgrade postgresql13Upgrade postgresql13-serverUpgrade libecpg6Upgrade postgresql14Upgrade postgresql96-pltclUpgrade postgresql12-pltclUpgrade postgresql12-plpythonUpgrade postgresql96-contribUpgrade postgresql96-docsUpgrade postgresql14-plpythonUpgrade postgresql10Upgrade libpq5Upgrade postgresql13-develUpgrade postgresql-serverUpgrade postgresql12Upgrade postgresql-plperlUpgrade postgresql96-plpythonUpgrade postgresql13-plpythonUpgrade postgresql10-serverUpgrade postgresql14-docsUpgrade postgresql14-serverUpgrade postgresql14-devel-miniUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql10-testUpgrade postgresql13-llvmjitUpgrade postgresql-docsUpgrade postgresql12-testUpgrade postgresql10-contribUpgrade postgresql14-llvmjitUpgrade postgresql96-serverUpgrade libecpg6-32bitUpgrade postgresql14-pltclUpgrade postgresql12-llvmjitUpgrade postgresql10-plpythonUpgrade postgresql14-testUpgrade postgresql13-server-develUpgrade postgresql12-contrib | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-13Upgrade postgresql-9.5 (Ubuntu Pro) | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub