A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-server-devel | May 4, 2022 | Jun 1, 2021 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresql15Upgrade postgresql | Mar 26, 2024 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-llvmjitUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2Upgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-devel | Sep 28, 2023 | Jun 1, 2021 |
| Amazon_linux | — | Upgrade postgresql96 | Jul 13, 2021 | May 27, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 1, 2021 |
| Centos_linux | — | Upgrade postgresql-develUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgauditUpgrade postgresql-libsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-server-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperlUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade pgaudit-debuginfo | Jun 10, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 30, 2025 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-plpython | Sep 16, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plperl | Oct 26, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-plpython | Sep 7, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql-test | Aug 10, 2021 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade postgresql-libsUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-pltclUpgrade postgresqlUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-pltclUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-libsUpgrade postgresql-server-develUpgrade postgresql-develUpgrade postgres-decoderbufsUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-plpythonUpgrade rh-postgresql10-postgresql-contribUpgrade pgauditUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresqlUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-test-rpm-macros | Jun 11, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red_hat Jboss_eap | — | — | Jun 18, 2021 | Jun 1, 2021 |
| Redhat_linux | — | Upgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-develUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufsNo solution existsUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-libsUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfo | Jun 10, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgresql-contribUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debugsource | May 5, 2022 | Jun 1, 2021 |
| Suse | — | Upgrade postgresql13-contribUpgrade postgresql12-testUpgrade postgresql10-testUpgrade postgresql14-docsUpgrade postgresql14-server-develUpgrade postgresql13-server-develUpgrade libpq5Upgrade postgresql12-server-develUpgrade postgresql13-llvmjit-develUpgrade postgresql10-plpythonUpgrade postgresql10-contribUpgrade postgresql12-plpythonUpgrade postgresql13-plpythonUpgrade postgresql10-pltclUpgrade postgresql12-contribUpgrade postgresql14-pltclUpgrade postgresql12Upgrade postgresql14Upgrade postgresql12-plperlUpgrade postgresql14-serverUpgrade postgresql13-pltclUpgrade postgresql12-develUpgrade postgresql12-llvmjitUpgrade postgresql12-docsUpgrade postgresql13-develUpgrade postgresql14-plpythonUpgrade libecpg6Upgrade postgresql13-plperlUpgrade postgresql13Upgrade postgresql10-plperlUpgrade libpq5-32bitUpgrade postgresql10Upgrade postgresql12-pltclUpgrade postgresql10-serverUpgrade postgresql10-docsUpgrade postgresql13-docsUpgrade postgresql14-contribUpgrade postgresql13-testUpgrade postgresql14-plperlUpgrade postgresql10-develUpgrade postgresql12-serverUpgrade postgresql14-develUpgrade postgresql13-llvmjitUpgrade postgresql13-server | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-10Upgrade postgresql-13 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub