A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pgauditUpgrade postgres-decoderbufs | May 4, 2022 | Oct 8, 2021 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql13Upgrade postgresqlUpgrade postgresql14 | Mar 26, 2024 | Oct 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plpython2Upgrade postgresql-docsUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3 | Sep 28, 2023 | Oct 8, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 8, 2021 |
| Centos_linux | — | Upgrade postgresql-testUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltclUpgrade pgauditUpgrade postgresql-plperl-debuginfo | Jun 11, 2021 | Jun 10, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql | Jun 12, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Red_hat Jboss_eap | — | — | Nov 30, 2021 | Oct 8, 2021 |
| Redhat_linux | — | Upgrade postgresql-contrib-debuginfoUpgrade pgauditUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3No solution existsUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltcl | Jun 11, 2021 | Jun 10, 2021 |
| Rocky_linux | — | Upgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgresql-pltclUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgres-decoderbufs-debugsourceUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-testUpgrade postgresql-plperl | May 5, 2022 | Oct 8, 2021 |
| Suse | — | Upgrade postgresql13-pltclUpgrade postgresql12-serverUpgrade postgresql14-plpythonUpgrade postgresql12-server-develUpgrade postgresql13-contribUpgrade postgresql13-llvmjitUpgrade postgresql12-pltclUpgrade postgresql13-llvmjit-develUpgrade postgresql12-testUpgrade postgresql12-plpythonUpgrade postgresql14Upgrade postgresql14-server-develUpgrade postgresql14-contribUpgrade postgresql12-plperlUpgrade libpq5-32bitUpgrade postgresql12-develUpgrade postgresql13-plperlUpgrade postgresql13-server-develUpgrade postgresql12-contribUpgrade postgresql12-llvmjitUpgrade postgresql13-serverUpgrade libecpg6Upgrade postgresql13Upgrade postgresql14-pltclUpgrade postgresql13-testUpgrade postgresql14-docsUpgrade postgresql12Upgrade postgresql14-serverUpgrade postgresql14-develUpgrade postgresql14-plperlUpgrade postgresql13-docsUpgrade libpq5Upgrade postgresql12-docsUpgrade postgresql13-plpythonUpgrade postgresql13-devel | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-10Upgrade postgresql-13 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub