A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpq-develUpgrade libpq | May 13, 2022 | Mar 2, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresqlUpgrade postgresql13Upgrade postgresql12Upgrade postgresql15 | Mar 26, 2024 | Mar 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade libpq-debuginfoUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade postgresql-server-develUpgrade libpq-develUpgrade postgresql-upgrade-develUpgrade postgresql-plpython2Upgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-llvmjitUpgrade libpq | Mar 5, 2024 | Mar 2, 2022 |
| Centos_linux | — | Upgrade libpq-develUpgrade libpqUpgrade libpq-devel-debuginfoUpgrade libpq-debuginfoUpgrade libpq-debugsource | May 13, 2022 | Mar 2, 2022 |
| Debian | — | Upgrade postgresql-13 | Nov 29, 2021 | Nov 29, 2021 |
| Freebsd | — | Upgrade postgresql96-serverUpgrade postgresql12-serverUpgrade postgresql10-serverUpgrade postgresql11-serverUpgrade postgresql14-serverUpgrade postgresql13-server | Nov 4, 2022 | Nov 10, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-plpython | May 25, 2022 | Mar 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-plperl | Mar 2, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-test | Feb 24, 2022 | Feb 23, 2022 |
| Oracle_linux | — | Upgrade libpq-develUpgrade libpq | May 18, 2022 | Nov 11, 2021 |
| Postgres | — | Upgrade to the latest version of PostgreSQLUpgrade to PostgreSQL version 14.1 | Mar 2, 2022 | Mar 2, 2022 |
| Redhat_linux | — | Upgrade libpq-debuginfoUpgrade libpq-develUpgrade libpqUpgrade libpq-devel-debuginfoNo solution existsUpgrade libpq-debugsource | May 13, 2022 | Mar 2, 2022 |
| Rocky_linux | — | Upgrade libpq-devel-debuginfoUpgrade libpq-debugsourceUpgrade libpq-develUpgrade libpqUpgrade libpq-debuginfo | Mar 5, 2024 | Mar 2, 2022 |
| Suse | — | Upgrade libecpg6-32bitUpgrade postgresql14-testUpgrade postgresql12-testUpgrade libpq5Upgrade postgresql10-serverUpgrade postgresql-docsUpgrade postgresql13-plpythonUpgrade postgresql14-docsUpgrade postgresql10Upgrade postgresql14-llvmjitUpgrade postgresql10-contribUpgrade postgresql13-llvmjitUpgrade postgresqlUpgrade postgresql12-llvmjitUpgrade postgresql10-plpythonUpgrade postgresql14-devel-miniUpgrade postgresql10-testUpgrade postgresql-plperlUpgrade postgresql96-plpythonUpgrade postgresql12Upgrade postgresql14-serverUpgrade postgresql13-server-develUpgrade postgresql12-contribUpgrade postgresql14-pltclUpgrade postgresql-pltclUpgrade postgresql13-develUpgrade postgresql-serverUpgrade postgresql96-serverUpgrade postgresql12-plperlUpgrade postgresql14-contribUpgrade postgresql12-pltclUpgrade postgresql12-server-develUpgrade postgresql13-contribUpgrade postgresql10-pltclUpgrade postgresql13-plperlUpgrade postgresql12-develUpgrade postgresql13Upgrade postgresql96-plperlUpgrade postgresql13-pltclUpgrade postgresql14-develUpgrade postgresql-develUpgrade postgresql96-contribUpgrade postgresql96-pltclUpgrade postgresql14Upgrade postgresql14-server-develUpgrade postgresql-contribUpgrade postgresql10-develUpgrade postgresql10-docsUpgrade postgresql13-docsUpgrade postgresql-server-develUpgrade postgresql12-serverUpgrade postgresql13-serverUpgrade libecpg6Upgrade postgresql13-testUpgrade postgresql10-plperlUpgrade postgresql12-plpythonUpgrade postgresql13-llvmjit-develUpgrade postgresql96-docsUpgrade postgresql14-plperlUpgrade postgresql14-plpythonUpgrade postgresql12-docsUpgrade postgresql-plpythonUpgrade libpq5-32bitUpgrade postgresql96 | Nov 21, 2021 | Nov 11, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-12Upgrade postgresql-10Upgrade postgresql-9.5 (Ubuntu Pro) | Nov 12, 2021 | Nov 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub