A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pgauditUpgrade postgres-decoderbufs | May 4, 2022 | Oct 8, 2021 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresqlUpgrade postgresql15Upgrade postgresql13 | Mar 26, 2024 | Oct 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plpython2Upgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-server | Sep 28, 2023 | Oct 8, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 8, 2021 |
| Centos_linux | — | Upgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperlUpgrade postgresql-test-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-plpython3-debuginfo | Jun 11, 2021 | Jun 10, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Oracle_linux | — | Upgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-test-rpm-macros | Jun 12, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Red_hat Jboss_eap | — | — | Nov 30, 2021 | Oct 8, 2021 |
| Redhat_linux | — | Upgrade postgresql-test-rpm-macrosUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pgauditNo solution existsUpgrade postgres-decoderbufsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsource | Jun 11, 2021 | Jun 10, 2021 |
| Rocky_linux | — | Upgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-serverUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docsUpgrade postgresql-upgradeUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docs-debuginfo | May 5, 2022 | Oct 8, 2021 |
| Suse | — | Upgrade postgresql12-contribUpgrade libpq5Upgrade postgresql13-plperlUpgrade postgresql14-plperlUpgrade postgresql14-develUpgrade postgresql12-docsUpgrade postgresql14-pltclUpgrade postgresql13-serverUpgrade postgresql13Upgrade postgresql13-develUpgrade postgresql13-plpythonUpgrade postgresql12-llvmjitUpgrade postgresql14-serverUpgrade postgresql13-testUpgrade postgresql12Upgrade postgresql13-docsUpgrade postgresql14-docsUpgrade libecpg6Upgrade postgresql13-server-develUpgrade postgresql12-server-develUpgrade postgresql14-contribUpgrade postgresql12-serverUpgrade postgresql14-plpythonUpgrade postgresql12-plpythonUpgrade postgresql13-llvmjitUpgrade postgresql14Upgrade postgresql12-pltclUpgrade postgresql13-contribUpgrade postgresql12-plperlUpgrade postgresql13-llvmjit-develUpgrade postgresql14-server-develUpgrade postgresql13-pltclUpgrade libpq5-32bitUpgrade postgresql12-develUpgrade postgresql12-test | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-13Upgrade postgresql-10 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub