An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Apr 1, 2021 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql14Upgrade postgresql15Upgrade postgresql13 | Jun 17, 2022 | Apr 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2Upgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-upgrade-devel | Sep 28, 2023 | Apr 1, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-debugsource | Jun 11, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Apr 1, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | May 28, 2021 | Apr 1, 2021 |
| Oracle_linux | — | Upgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-test | Jun 12, 2021 | Feb 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.2 | Feb 12, 2021 | Feb 12, 2021 |
| Redhat_linux | — | Upgrade postgresql-testUpgrade pgauditUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfo | Jun 11, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade postgresql-docs-debuginfo | May 5, 2022 | Apr 1, 2021 |
| Suse | — | Upgrade postgresql12-contribUpgrade postgresql13-plpythonUpgrade postgresql14-plperlUpgrade postgresql12-server-develUpgrade postgresql12-pltclUpgrade postgresql13-serverUpgrade postgresql14-llvmjit-develUpgrade postgresql12-testUpgrade postgresql13-testUpgrade postgresql13-llvmjit-develUpgrade libecpg6-32bitUpgrade libpq5Upgrade postgresql13-plperlUpgrade postgresql14-llvmjitUpgrade postgresql13-server-develUpgrade postgresql12-plpythonUpgrade postgresql15Upgrade postgresql14-pltclUpgrade postgresql14-develUpgrade libecpg6Upgrade postgresql12-llvmjitUpgrade postgresql14Upgrade postgresql13-pltclUpgrade postgresql14-serverUpgrade postgresql13Upgrade postgresql13-develUpgrade postgresql14-docsUpgrade postgresql13-llvmjitUpgrade postgresql12Upgrade postgresql12-docsUpgrade postgresql13-docsUpgrade postgresql12-serverUpgrade postgresql14-plpythonUpgrade postgresql14-contribUpgrade libpq5-32bitUpgrade postgresql12-develUpgrade postgresql13-contribUpgrade postgresql14-server-develUpgrade postgresql12-plperl | Feb 23, 2021 | Feb 15, 2021 |
| Ubuntu | — | Upgrade postgresql-12 | Feb 16, 2021 | Feb 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub