A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade pgaudit | May 4, 2022 | Oct 8, 2021 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql15Upgrade postgresqlUpgrade postgresql14 | Mar 26, 2024 | Oct 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2Upgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-llvmjitUpgrade postgresql-docsUpgrade postgresql-contrib | Sep 28, 2023 | Oct 8, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 8, 2021 |
| Centos_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-plperlUpgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfo | Jun 11, 2021 | Jun 10, 2021 |
| Debian | — | Upgrade postgresql-13 | May 17, 2021 | May 17, 2021 |
| Oracle_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-plperl | Jun 12, 2021 | May 13, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.3 | May 14, 2021 | May 14, 2021 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | May 13, 2021 |
| Red_hat Jboss_eap | — | — | Nov 30, 2021 | Oct 8, 2021 |
| Redhat_linux | — | Upgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-docsUpgrade pgaudit-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribNo solution existsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufs-debuginfo | Jun 11, 2021 | Jun 10, 2021 |
| Rocky_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-serverUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql | May 5, 2022 | Oct 8, 2021 |
| Suse | — | Upgrade postgresql13-llvmjit-develUpgrade postgresql12-server-develUpgrade postgresql12-testUpgrade postgresql14-plpythonUpgrade postgresql12-llvmjitUpgrade postgresql13-server-develUpgrade postgresql14-pltclUpgrade postgresql13-develUpgrade postgresql13-docsUpgrade postgresql14-docsUpgrade postgresql13-plperlUpgrade postgresql12Upgrade postgresql12-docsUpgrade postgresql13-serverUpgrade postgresql14-develUpgrade postgresql14-plperlUpgrade postgresql13-testUpgrade postgresql13Upgrade libecpg6Upgrade postgresql14-contribUpgrade postgresql12-develUpgrade postgresql13-llvmjitUpgrade postgresql12-plperlUpgrade postgresql14Upgrade postgresql13-pltclUpgrade postgresql12-serverUpgrade libpq5-32bitUpgrade postgresql12-plpythonUpgrade postgresql12-pltclUpgrade postgresql13-contribUpgrade postgresql14-server-devel | May 28, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-13Upgrade postgresql-10 | Jun 2, 2021 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub