A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-staticUpgrade pgaudit | May 4, 2022 | Jun 1, 2021 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresqlUpgrade postgresql13 | Mar 26, 2024 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-plpython | Sep 28, 2023 | Jun 1, 2021 |
| Amazon_linux | — | Upgrade postgresql96 | Jul 13, 2021 | May 27, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 1, 2021 |
| Centos_linux | — | Upgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade pgauditUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-pltclUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-debuginfo | Jun 10, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 30, 2025 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql | Sep 16, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql | Oct 26, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-test | Sep 7, 2021 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-pltcl | Aug 10, 2021 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade postgresql-server-develUpgrade rh-postgresql10-postgresql-serverUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-develUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade postgresql-develUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-contribUpgrade postgres-decoderbufsUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresqlUpgrade pgauditUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-libsUpgrade postgresqlUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-testUpgrade rh-postgresql10-postgresql-pltclUpgrade rh-postgresql10-postgresql-contrib-syspaths | Jun 11, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red_hat Jboss_eap | — | — | Jun 18, 2021 | Jun 1, 2021 |
| Redhat_linux | — | Upgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-develUpgrade pgauditUpgrade postgresql-testUpgrade postgresql-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docs-debuginfoUpgrade postgresql-libsUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltclUpgrade postgresql-plpythonNo solution existsUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfo | Jun 10, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltclUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfoUpgrade pgaudit-debuginfo | May 5, 2022 | Jun 1, 2021 |
| Suse | — | Upgrade postgresql13-testUpgrade postgresql14-plpythonUpgrade postgresql14-plperlUpgrade postgresql10-plperlUpgrade postgresql13-llvmjitUpgrade postgresql10Upgrade postgresql13-plperlUpgrade postgresql10-serverUpgrade postgresql13Upgrade postgresql12-pltclUpgrade postgresql10-docsUpgrade libpq5-32bitUpgrade postgresql13-serverUpgrade postgresql14-develUpgrade postgresql13-docsUpgrade postgresql10-develUpgrade postgresql12-docsUpgrade postgresql12-serverUpgrade postgresql14-contribUpgrade postgresql13-server-develUpgrade postgresql14-pltclUpgrade postgresql12-plpythonUpgrade postgresql14Upgrade postgresql12Upgrade postgresql10-plpythonUpgrade postgresql13-plpythonUpgrade libpq5Upgrade postgresql12-develUpgrade postgresql12-llvmjitUpgrade postgresql10-testUpgrade postgresql10-pltclUpgrade libecpg6Upgrade postgresql14-server-develUpgrade postgresql14-docsUpgrade postgresql13-contribUpgrade postgresql12-testUpgrade postgresql12-server-develUpgrade postgresql10-contribUpgrade postgresql14-serverUpgrade postgresql13-llvmjit-develUpgrade postgresql12-plperlUpgrade postgresql13-pltclUpgrade postgresql13-develUpgrade postgresql12-contrib | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-10Upgrade postgresql-13 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub