An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Apr 1, 2021 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql14Upgrade postgresql15Upgrade postgresql | Jun 17, 2022 | Apr 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-plpython2Upgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-llvmjitUpgrade postgresql-plperlUpgrade postgresql-plpython3 | Sep 28, 2023 | Apr 1, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade postgresql-static | Jun 11, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Apr 1, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | May 28, 2021 | Apr 1, 2021 |
| Oracle_linux | — | Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresqlUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-static | Jun 12, 2021 | Feb 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.2 | Feb 12, 2021 | Feb 12, 2021 |
| Redhat_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-server-devel | Jun 11, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-server-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade pgaudit-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3 | May 5, 2022 | Apr 1, 2021 |
| Suse | — | Upgrade postgresql12-plperlUpgrade libpq5-32bitUpgrade postgresql14-plpythonUpgrade postgresql13-llvmjitUpgrade postgresql14-server-develUpgrade postgresql13-contribUpgrade postgresql12Upgrade postgresql12-develUpgrade postgresql14-contribUpgrade postgresql13-docsUpgrade postgresql12-docsUpgrade postgresql12-serverUpgrade libpq5Upgrade postgresql13-serverUpgrade libecpg6-32bitUpgrade postgresql13-develUpgrade postgresql12-llvmjitUpgrade postgresql14-serverUpgrade postgresql14-llvmjit-develUpgrade postgresql13Upgrade postgresql14-pltclUpgrade postgresql14-llvmjitUpgrade postgresql14-docsUpgrade postgresql13-plperlUpgrade postgresql12-contribUpgrade postgresql12-server-develUpgrade postgresql14-develUpgrade postgresql13-plpythonUpgrade postgresql12-testUpgrade postgresql12-plpythonUpgrade postgresql14Upgrade postgresql15Upgrade postgresql12-pltclUpgrade libecpg6Upgrade postgresql13-testUpgrade postgresql14-plperlUpgrade postgresql13-server-develUpgrade postgresql13-pltclUpgrade postgresql13-llvmjit-devel | Feb 23, 2021 | Feb 15, 2021 |
| Ubuntu | — | Upgrade postgresql-12 | Feb 16, 2021 | Feb 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub