A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pgauditUpgrade postgres-decoderbufs | May 4, 2022 | Oct 8, 2021 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresqlUpgrade postgresql13Upgrade postgresql14 | Mar 26, 2024 | Oct 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plpython2Upgrade postgresql-docsUpgrade postgresql-llvmjitUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-server-devel | Sep 28, 2023 | Oct 8, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 8, 2021 |
| Centos_linux | — | Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-plperlUpgrade postgresql-test-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docs-debuginfoUpgrade postgresql-docs | Jun 11, 2021 | Jun 10, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Oracle_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contrib | Jun 12, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Red_hat Jboss_eap | — | — | Nov 30, 2021 | Oct 8, 2021 |
| Redhat_linux | — | Upgrade postgresql-test-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsNo solution existsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plpython3 | Jun 11, 2021 | Jun 10, 2021 |
| Rocky_linux | — | Upgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade pgaudit-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debugsource | May 5, 2022 | Oct 8, 2021 |
| Suse | — | Upgrade libpq5Upgrade postgresql14-pltclUpgrade postgresql13-develUpgrade postgresql13-serverUpgrade postgresql12-docsUpgrade postgresql13-plpythonUpgrade postgresql13-docsUpgrade postgresql13-plperlUpgrade postgresql13-testUpgrade postgresql12-contribUpgrade postgresql14-serverUpgrade postgresql13-server-develUpgrade postgresql13Upgrade postgresql12-llvmjitUpgrade libecpg6Upgrade postgresql14-docsUpgrade postgresql12Upgrade postgresql14-plperlUpgrade postgresql14-develUpgrade postgresql14Upgrade postgresql12-pltclUpgrade postgresql12-testUpgrade postgresql14-plpythonUpgrade postgresql12-plpythonUpgrade postgresql12-server-develUpgrade postgresql12-serverUpgrade libpq5-32bitUpgrade postgresql14-contribUpgrade postgresql14-server-develUpgrade postgresql12-plperlUpgrade postgresql13-llvmjit-develUpgrade postgresql13-llvmjitUpgrade postgresql12-develUpgrade postgresql13-pltclUpgrade postgresql13-contrib | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-13Upgrade postgresql-10 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub