A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade pgaudit | May 4, 2022 | Oct 8, 2021 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresqlUpgrade postgresql15Upgrade postgresql14 | Mar 26, 2024 | Oct 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-docsUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-debuginfo | Sep 28, 2023 | Oct 8, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 8, 2021 |
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pgauditUpgrade pgaudit-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-staticUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server | Jun 11, 2021 | Jun 10, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade pgaudit | Jun 12, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Red_hat Jboss_eap | — | — | Nov 30, 2021 | Oct 8, 2021 |
| Redhat_linux | — | Upgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufs-debugsourceUpgrade pgauditUpgrade postgresql-plpython3No solution existsUpgrade postgresql-upgradeUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-serverUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debugsource | Jun 11, 2021 | Jun 10, 2021 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade pgauditUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltcl | May 5, 2022 | Oct 8, 2021 |
| Suse | — | Upgrade postgresql14-develUpgrade postgresql13-docsUpgrade postgresql13Upgrade postgresql14-docsUpgrade postgresql13-testUpgrade postgresql13-server-develUpgrade libpq5Upgrade postgresql14-plperlUpgrade postgresql12-llvmjitUpgrade postgresql13-plperlUpgrade postgresql13-develUpgrade postgresql14-serverUpgrade postgresql13-plpythonUpgrade libecpg6Upgrade postgresql12-docsUpgrade postgresql12Upgrade postgresql13-serverUpgrade postgresql14-pltclUpgrade postgresql12-contribUpgrade postgresql14-contribUpgrade postgresql14-server-develUpgrade postgresql13-llvmjit-develUpgrade postgresql14Upgrade postgresql13-contribUpgrade postgresql12-pltclUpgrade postgresql13-pltclUpgrade postgresql12-plperlUpgrade postgresql13-llvmjitUpgrade postgresql12-testUpgrade postgresql12-develUpgrade postgresql14-plpythonUpgrade postgresql12-serverUpgrade postgresql12-plpythonUpgrade postgresql12-server-develUpgrade libpq5-32bit | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-13Upgrade postgresql-12 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub