A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-plperl | May 4, 2022 | Oct 11, 2021 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresql15Upgrade postgresql | Mar 26, 2024 | Oct 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql-pltclUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-upgrade-devel | Sep 28, 2023 | Oct 11, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 11, 2021 |
| Centos_linux | — | Upgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade pgaudit-debuginfoUpgrade postgresqlUpgrade postgresql-server-devel | Jun 10, 2021 | Jun 9, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Oct 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-devel | Dec 28, 2021 | Oct 11, 2021 |
| Oracle_linux | — | Upgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade rh-postgresql10-postgresql-pltclUpgrade rh-postgresql10-postgresqlUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-docsUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresqlUpgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-develUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-server-devel | Jun 11, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Redhat_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoNo solution existsUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade pgaudit-debugsource | Jun 10, 2021 | Jun 9, 2021 |
| Rocky_linux | — | Upgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltclUpgrade pgaudit-debuginfoUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-static | May 5, 2022 | Oct 11, 2021 |
| Suse | — | Upgrade postgresql13-llvmjit-develUpgrade postgresql14Upgrade postgresql13-serverUpgrade postgresql12-serverUpgrade postgresql14-plpythonUpgrade postgresql12-plperlUpgrade postgresql10-pltclUpgrade postgresql13-contribUpgrade postgresql10-plpythonUpgrade postgresql10-develUpgrade postgresql13Upgrade postgresql12-plpythonUpgrade postgresql12-develUpgrade postgresql10-docsUpgrade postgresql12-contribUpgrade postgresql12-docsUpgrade postgresql10-serverUpgrade postgresql14-contribUpgrade postgresql12-pltclUpgrade postgresql14-pltclUpgrade libpq5Upgrade postgresql14-develUpgrade postgresql12-llvmjitUpgrade postgresql14-serverUpgrade postgresql10-contribUpgrade postgresql12Upgrade postgresql13-docsUpgrade postgresql10Upgrade postgresql13-develUpgrade postgresql14-plperlUpgrade postgresql13-plpythonUpgrade postgresql13-testUpgrade postgresql13-llvmjitUpgrade postgresql13-server-develUpgrade postgresql13-pltclUpgrade postgresql10-testUpgrade postgresql14-server-develUpgrade libecpg6Upgrade postgresql13-plperlUpgrade postgresql12-server-develUpgrade postgresql14-docsUpgrade postgresql10-plperlUpgrade libpq5-32bitUpgrade postgresql12-test | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-13Upgrade postgresql-12Upgrade postgresql-10 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub