An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Apr 1, 2021 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql15Upgrade postgresql14Upgrade postgresql | Jun 17, 2022 | Apr 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfo | Sep 28, 2023 | Apr 1, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debuginfo | Jun 11, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Apr 1, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | May 28, 2021 | Apr 1, 2021 |
| Oracle_linux | — | Upgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-docs | Jun 12, 2021 | Feb 11, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.2 | Feb 12, 2021 | Feb 12, 2021 |
| Redhat_linux | — | Upgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-test-debuginfoUpgrade postgresqlUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debuginfo | Jun 11, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-static | May 5, 2022 | Apr 1, 2021 |
| Suse | — | Upgrade postgresql12-plperlUpgrade postgresql14-contribUpgrade postgresql13-docsUpgrade postgresql12-serverUpgrade postgresql12Upgrade postgresql13-contribUpgrade postgresql12-develUpgrade postgresql12-docsUpgrade postgresql14-server-develUpgrade postgresql14-plpythonUpgrade postgresql13-llvmjitUpgrade libpq5-32bitUpgrade postgresql12-contribUpgrade postgresql13-server-develUpgrade postgresql13-pltclUpgrade postgresql13Upgrade postgresql12-llvmjitUpgrade postgresql13-llvmjit-develUpgrade postgresql14-docsUpgrade postgresql13-serverUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql13-plperlUpgrade postgresql14-llvmjitUpgrade postgresql12-plpythonUpgrade postgresql15Upgrade postgresql14-pltclUpgrade postgresql12-testUpgrade postgresql14-llvmjit-develUpgrade postgresql12-server-develUpgrade postgresql14-develUpgrade postgresql14-plperlUpgrade postgresql14-serverUpgrade postgresql14Upgrade libecpg6Upgrade postgresql12-pltclUpgrade postgresql13-testUpgrade postgresql13-develUpgrade postgresql13-plpython | Feb 23, 2021 | Feb 15, 2021 |
| Ubuntu | — | Upgrade postgresql-12 | Feb 16, 2021 | Feb 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub