A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-server-develUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-test-rpm-macros | May 4, 2022 | Oct 11, 2021 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresqlUpgrade postgresql13 | Mar 26, 2024 | Oct 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-plpython2Upgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-static | Sep 28, 2023 | Oct 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 11, 2021 |
| Centos_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfo | Jun 10, 2021 | Jun 9, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Oct 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-contrib | Dec 28, 2021 | Oct 11, 2021 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-staticUpgrade postgresql-pltclUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresqlUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-testUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-libsUpgrade postgresqlUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade postgres-decoderbufsUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-serverUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-contribUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-testUpgrade rh-postgresql10-postgresql-plpython | Jun 11, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Redhat_linux | — | Upgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-plperlNo solution existsUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plperl-debuginfo | Jun 10, 2021 | Jun 9, 2021 |
| Rocky_linux | — | Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-test-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade pgaudit-debuginfoUpgrade pgauditUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltcl | May 5, 2022 | Oct 11, 2021 |
| Suse | — | Upgrade postgresql10-serverUpgrade postgresql14-serverUpgrade postgresql14-develUpgrade postgresql13-server-develUpgrade libpq5Upgrade postgresql12-llvmjitUpgrade postgresql12-docsUpgrade postgresql10-testUpgrade postgresql13-testUpgrade postgresql14-plperlUpgrade postgresql10-contribUpgrade postgresql12-plpythonUpgrade postgresql12-plperlUpgrade postgresql13-pltclUpgrade postgresql12-pltclUpgrade libecpg6Upgrade postgresql14-server-develUpgrade postgresql13Upgrade postgresql12-serverUpgrade postgresql14-docsUpgrade libpq5-32bitUpgrade postgresql10-develUpgrade postgresql12-server-develUpgrade postgresql10-plperlUpgrade postgresql13-serverUpgrade postgresql14-plpythonUpgrade postgresql13-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql12-develUpgrade postgresql12-contribUpgrade postgresql10-docsUpgrade postgresql14Upgrade postgresql12-testUpgrade postgresql13-plperlUpgrade postgresql10-plpythonUpgrade postgresql13-contribUpgrade postgresql10-pltclUpgrade postgresql13-llvmjitUpgrade postgresql10Upgrade postgresql13-develUpgrade postgresql13-docsUpgrade postgresql13-plpythonUpgrade postgresql12Upgrade postgresql14-pltcl | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-12Upgrade postgresql-10 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub