An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Apr 1, 2021 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql15Upgrade postgresql14Upgrade postgresql | Jun 17, 2022 | Apr 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plpython2Upgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs | Sep 28, 2023 | Apr 1, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade postgresql-contrib-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-contribUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server | Jun 11, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Apr 1, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | May 28, 2021 | Apr 1, 2021 |
| Oracle_linux | — | Upgrade pgauditUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-docs | Jun 12, 2021 | Feb 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.2 | Feb 12, 2021 | Feb 12, 2021 |
| Redhat_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgresql-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresqlUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-debuginfo | Jun 11, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-docs-debuginfoUpgrade postgresql-static | May 5, 2022 | Apr 1, 2021 |
| Suse | — | Upgrade postgresql14-server-develUpgrade postgresql13-llvmjitUpgrade postgresql14-contribUpgrade postgresql12-plperlUpgrade postgresql12-serverUpgrade postgresql12-docsUpgrade libpq5-32bitUpgrade postgresql12-develUpgrade postgresql13-docsUpgrade postgresql12Upgrade postgresql13-contribUpgrade postgresql14-plpythonUpgrade postgresql13-testUpgrade postgresql13-pltclUpgrade postgresql13-plperlUpgrade postgresql13-server-develUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql12-pltclUpgrade postgresql15Upgrade postgresql13-serverUpgrade postgresql13-llvmjit-develUpgrade postgresql14Upgrade postgresql14-serverUpgrade postgresql14-plperlUpgrade postgresql12-llvmjitUpgrade postgresql12-server-develUpgrade postgresql12-testUpgrade postgresql14-develUpgrade postgresql13-plpythonUpgrade postgresql12-plpythonUpgrade postgresql14-pltclUpgrade postgresql13-develUpgrade postgresql13Upgrade postgresql14-llvmjit-develUpgrade postgresql14-llvmjitUpgrade postgresql14-docsUpgrade postgresql12-contribUpgrade libecpg6 | Feb 23, 2021 | Feb 15, 2021 |
| Ubuntu | — | Upgrade postgresql-12 | Feb 16, 2021 | Feb 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub