Search CVE reports

21 – 30 of 82 results

Detailed view

Sort by:

CVE-2021-23222

Medium priority

Some fixes available 5 of 6

A man-in-the-middle attacker can inject false responses to the client’s first few queries, despite the use of SSL certificate verification and encryption.

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	Not in release	Not in release	Not in release	Fixed
postgresql-12	Not in release	Not in release	Fixed	Not in release
postgresql-13	Not in release	Not in release	Not in release	Not in release
postgresql-9.1	Not in release	Not in release	Not in release	Not in release
postgresql-9.3	Not in release	Not in release	Not in release	Not in release
postgresql-9.5	Not in release	Not in release	Not in release	Not in release

CVE-2021-23214

Medium priority

Some fixes available 5 of 6

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	Not in release	Not in release	Not in release	Fixed
postgresql-12	Not in release	Not in release	Fixed	Not in release
postgresql-13	Not in release	Not in release	Not in release	Not in release
postgresql-9.1	Not in release	Not in release	Not in release	Not in release
postgresql-9.3	Not in release	Not in release	Not in release	Not in release
postgresql-9.5	Not in release	Not in release	Not in release	Not in release

CVE-2021-3677

Medium priority

Fixed

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	Not in release	Not in release	Not affected
postgresql-12	—	Not in release	Fixed	Not in release
postgresql-13	—	Not in release	Not in release	Not in release
postgresql-9.1	—	Not in release	Not in release	Not in release
postgresql-9.3	—	Not in release	Not in release	Not in release
postgresql-9.5	—	Not in release	Not in release	Not in release

CVE-2021-32027

Medium priority

Some fixes available 5 of 6

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	Not in release	Not in release	Not in release	Fixed
postgresql-12	Not in release	Not in release	Fixed	Not in release
postgresql-13	Not in release	Not in release	Not in release	Not in release
postgresql-9.1	Not in release	Not in release	Not in release	Not in release
postgresql-9.3	Not in release	Not in release	Not in release	Not in release
postgresql-9.5	Not in release	Not in release	Not in release	Not in release

CVE-2021-32029

Medium priority

Some fixes available 3 of 4

A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	Not in release	Not in release	Not in release	Not affected
postgresql-12	Not in release	Not in release	Fixed	Not in release
postgresql-13	Not in release	Not in release	Not in release	Not in release
postgresql-9.1	Not in release	Not in release	Not in release	Not in release
postgresql-9.3	Not in release	Not in release	Not in release	Not in release
postgresql-9.5	Not in release	Not in release	Not in release	Not in release

CVE-2021-32028

Medium priority

Some fixes available 4 of 6

A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	Not in release	Not in release	Not in release	Fixed
postgresql-12	Not in release	Not in release	Fixed	Not in release
postgresql-13	Not in release	Not in release	Not in release	Not in release
postgresql-9.1	Not in release	Not in release	Not in release	Not in release
postgresql-9.3	Not in release	Not in release	Not in release	Not in release
postgresql-9.5	Not in release	Not in release	Not in release	Not in release

CVE-2021-3449

High priority

Some fixes available 16 of 17

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial...

10 affected packages

edk2, nodejs, openssl, openssl1.0, postgresql-10...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
edk2	Not affected	Not affected	Not affected	Not affected
nodejs	Not affected	Not affected	Not affected	Not affected
openssl	Fixed	Fixed	Fixed	Fixed
openssl1.0	Not in release	Not in release	Not in release	Not affected
postgresql-10	Not in release	Not in release	Not in release	Fixed
postgresql-12	Not in release	Not in release	Fixed	Not in release
postgresql-13	Not in release	Not in release	Not in release	Not in release
postgresql-9.1	Not in release	Not in release	Not in release	Not in release
postgresql-9.3	Not in release	Not in release	Not in release	Not in release
postgresql-9.5	Not in release	Not in release	Not in release	Not in release

CVE-2019-10128

Medium priority

Not affected

A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it...

5 affected packages

postgresql-10, postgresql-11, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Not affected
postgresql-11	—	—	—	Not in release
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release

CVE-2019-10127

Medium priority

Not affected

A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps...

5 affected packages

postgresql-10, postgresql-11, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Not affected
postgresql-11	—	—	—	Not in release
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release

CVE-2021-3393

Medium priority

Fixed

An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	Not in release	Not affected
postgresql-12	—	—	Fixed	Not in release
postgresql-13	—	—	Not in release	Not in release
postgresql-9.1	—	—	Not in release	Not in release
postgresql-9.3	—	—	Not in release	Not in release
postgresql-9.5	—	—	Not in release	Not in release

Export to JSON

Results by page: