An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Apr 1, 2021 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresql15Upgrade postgresql | Jun 17, 2022 | Apr 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2Upgrade postgresql-upgradeUpgrade postgresql-llvmjitUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql | Sep 28, 2023 | Apr 1, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contribUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-upgrade-devel-debuginfo | Jun 11, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Apr 1, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | May 28, 2021 | Apr 1, 2021 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade pgaudit | Jun 12, 2021 | Feb 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.2 | Feb 12, 2021 | Feb 12, 2021 |
| Redhat_linux | — | Upgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contribUpgrade pgaudit-debugsourceUpgrade postgresql-plperl | Jun 11, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade pgaudit-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfo | May 5, 2022 | Apr 1, 2021 |
| Suse | — | Upgrade postgresql15Upgrade postgresql12-contribUpgrade libecpg6Upgrade postgresql14-serverUpgrade postgresql12-plpythonUpgrade postgresql13-plperlUpgrade postgresql13-llvmjit-develUpgrade postgresql14-docsUpgrade postgresql13-serverUpgrade postgresql12-pltclUpgrade libpq5Upgrade postgresql13-pltclUpgrade postgresql14Upgrade postgresql13-server-develUpgrade postgresql13Upgrade postgresql13-testUpgrade postgresql14-llvmjitUpgrade postgresql13-develUpgrade libecpg6-32bitUpgrade postgresql12-llvmjitUpgrade postgresql14-llvmjit-develUpgrade postgresql14-pltclUpgrade postgresql12-server-develUpgrade postgresql14-develUpgrade postgresql12-testUpgrade postgresql13-plpythonUpgrade postgresql14-plperlUpgrade postgresql12-docsUpgrade postgresql12Upgrade postgresql12-plperlUpgrade postgresql12-develUpgrade libpq5-32bitUpgrade postgresql14-contribUpgrade postgresql13-docsUpgrade postgresql12-serverUpgrade postgresql13-llvmjitUpgrade postgresql14-plpythonUpgrade postgresql14-server-develUpgrade postgresql13-contrib | Feb 23, 2021 | Feb 15, 2021 |
| Ubuntu | — | Upgrade postgresql-12 | Feb 16, 2021 | Feb 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub