vulnerability

Ubuntu: (Multiple Advisories) (CVE-2021-3677): PostgreSQL vulnerabilities

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Aug 12, 2021
Added
Aug 14, 2021
Modified
Mar 27, 2026

Description

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

Solutions

ubuntu-upgrade-postgresql-12ubuntu-upgrade-postgresql-13
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.