A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-server | May 4, 2022 | Jun 1, 2021 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql14Upgrade postgresql15Upgrade postgresql13 | Mar 26, 2024 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-plpythonUpgrade postgresql-plpython2Upgrade postgresql-llvmjitUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl | Sep 28, 2023 | Jun 1, 2021 |
| Amazon_linux | — | Upgrade postgresql96 | Jul 13, 2021 | May 27, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 1, 2021 |
| Centos_linux | — | Upgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade pgaudit-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade postgresql-libsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-develUpgrade postgresql-upgrade-debuginfo | Jun 10, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 30, 2025 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-contrib | Sep 16, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql | Oct 26, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-testUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-plpython | Sep 7, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-docs | Aug 10, 2021 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-docsUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-docsUpgrade rh-postgresql10-postgresqlUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-develUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql-plpythonUpgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-upgrade-develUpgrade postgresql-libsUpgrade postgresql-testUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-plperlUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-server | Jun 11, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red_hat Jboss_eap | — | — | Jun 18, 2021 | Jun 1, 2021 |
| Redhat_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-libsUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-devel-debuginfoNo solution existsUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfo | Jun 10, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server | May 5, 2022 | Jun 1, 2021 |
| Suse | — | Upgrade postgresql13-develUpgrade postgresql14-pltclUpgrade libecpg6Upgrade postgresql12-testUpgrade postgresql12-plperlUpgrade postgresql12-llvmjitUpgrade postgresql13-llvmjit-develUpgrade postgresql14Upgrade postgresql13-pltclUpgrade postgresql10-plpythonUpgrade postgresql12-contribUpgrade libpq5Upgrade postgresql13-contribUpgrade postgresql13-plpythonUpgrade postgresql14-server-develUpgrade postgresql12-plpythonUpgrade postgresql14-serverUpgrade postgresql10-pltclUpgrade postgresql12-develUpgrade postgresql13-server-develUpgrade postgresql12Upgrade postgresql10-contribUpgrade postgresql14-docsUpgrade postgresql12-server-develUpgrade postgresql10-testUpgrade postgresql10-plperlUpgrade postgresql13-plperlUpgrade postgresql13-llvmjitUpgrade postgresql14-plperlUpgrade postgresql10Upgrade postgresql13Upgrade postgresql10-serverUpgrade postgresql12-pltclUpgrade postgresql14-develUpgrade postgresql14-contribUpgrade postgresql13-serverUpgrade postgresql13-testUpgrade libpq5-32bitUpgrade postgresql10-develUpgrade postgresql12-docsUpgrade postgresql13-docsUpgrade postgresql10-docsUpgrade postgresql14-plpythonUpgrade postgresql12-server | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-13Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-12 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub