Lucene search
GoogleOSV:ALSA-2021:5235HistoryDec 21, 2021 - 9:10 a.m.
Moderate: postgresql:12 security update
2021-12-2109:10:31
Google
osv.dev
3
PostgreSQL is an advanced object-relational database management system (DBMS).
The following packages have been upgraded to a later upstream version: postgresql (12.9).
Security Fix(es):
-
postgresql: memory disclosure in certain queries (CVE-2021-3677)
-
postgresql: server processes unencrypted bytes from man-in-the-middle (CVE-2021-23214)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
osv
osv
Moderate: postgresql:12 security update
2021-12-21 09:10:31
Moderate: postgresql:13 security update
2021-12-21 09:10:35
Moderate: postgresql:13 security update
2021-12-21 09:10:35
almalinux
almalinux
Moderate: postgresql:12 security update
2021-12-21 09:10:31
Moderate: postgresql:13 security update
2021-12-21 09:10:35
Moderate: postgresql:10 security update
2022-05-10 08:03:34
nessus
nessus
AlmaLinux 8 : postgresql:12 (ALSA-2021:5235)
2022-03-12 00:00:00
RHEL 8 : postgresql:13 (RHSA-2021:5236)
2021-12-22 00:00:00
AlmaLinux 8 : postgresql:13 (ALSA-2021:5236)
2022-03-12 00:00:00
redhat
redhat
(RHSA-2021:5235) Moderate: postgresql:12 security update
2021-12-21 09:10:31
(RHSA-2021:5236) Moderate: postgresql:13 security update
2021-12-21 09:10:35
(RHSA-2021:5179) Moderate: rh-postgresql13-postgresql security update
2021-12-16 11:34:46
rocky
rocky
postgresql:12 security update
2021-12-21 09:10:31
postgresql:13 security update
2021-12-21 09:10:35
postgresql:10 security update
2022-05-10 08:03:34
oraclelinux
oraclelinux
postgresql:12 security update
2021-12-22 00:00:00
postgresql:13 security update
2021-12-22 00:00:00
postgresql:10 security update
2022-05-17 00:00:00
altlinux
altlinux
veracode
veracode
Man-in-the-Middle (MitM)
2021-11-14 07:40:11
Information Disclosure
2021-08-14 06:40:09
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2021-23214 affecting package postgresql for versions less than 14.2-1
2022-04-26 20:17:02
CVE-2021-23214 affecting package postgresql 12.8-1
2022-03-19 16:40:54
CVE-2021-3677 affecting package postgresql for versions less than 14.2-1
2022-04-26 20:17:02
nvd
nvd
amazon
amazon
Medium: postgresql93
2023-01-18 20:56:00
Medium: postgresql94
2023-01-18 20:56:00
Medium: postgresql92
2023-01-18 20:56:00
redhatcve
redhatcve
CVE-2021-23214
2022-04-26 22:23:51
CVE-2021-3677
2021-09-07 11:37:31
alpinelinux
alpinelinux
CVE-2021-23214
2022-03-04 16:15:08
CVE-2021-3677
2022-03-02 23:15:08
debiancve
debiancve
CVE-2021-23214
2022-03-04 16:15:08
CVE-2021-3677
2022-03-02 23:15:08
ubuntucve
ubuntucve
CVE-2021-23214
2021-11-11 00:00:00
CVE-2021-3677
2021-08-12 00:00:00
archlinux
archlinux
[ASA-202203-1] postgresql: man-in-the-middle
2022-03-25 00:00:00
[ASA-202204-1] postgresql: man-in-the-middle
2022-04-04 00:00:00
prion
prion
Sql injection
2022-03-04 16:15:00
Default configuration
2022-03-02 23:15:00
Sql injection
2022-08-25 18:15:00
cvelist
cvelist
cve
cve
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3120-1)
2021-09-23 00:00:00
openSUSE: Security Advisory for postgresql12 (openSUSE-SU-2021:3256-1)
2021-10-02 00:00:00
Mageia: Security Advisory (MGASA-2021-0424)
2022-01-28 00:00:00
freebsd
freebsd
PostgreSQL server -- Memory disclosure in certain queries
2021-08-12 00:00:00
PostgreSQL -- Possible man-in-the-middle attacks
2021-11-08 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2021-09-23 07:49:29
Updated postgresql packages fix security vulnerability
2021-11-25 16:06:13
postgresql
postgresql
Vulnerability in core server (CVE-2021-3677)
1970-01-01 00:00:00
kaspersky
kaspersky
KLA12262 OSI vulnerability in PostgreSQL
2021-08-12 00:00:00
KLA12378 Multiple vulnerabilities in PostgreSQL
2021-11-11 00:00:00
suse
suse
Security update for postgresql13 (moderate)
2021-09-29 00:00:00
Security update for postgresql12 (moderate)
2021-09-29 00:00:00
Security update for postgresql12 (important)
2021-11-22 00:00:00
gentoo
gentoo
PostgreSQL: Multiple Vulnerabilities
2022-11-19 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2022-09-28 00:00:00
PostgreSQL vulnerabilities
2021-11-11 00:00:00
PostgreSQL vulnerabilities
2021-08-12 00:00:00
debian
debian
[SECURITY] [DSA 5006-1] postgresql-11 security update
2021-11-11 21:49:53
[SECURITY] [DSA 5007-1] postgresql-13 security update
2021-11-11 21:52:56
[SECURITY] [DLA 2817-1] postgresql-9.6 security update
2021-11-12 08:46:22
redos
redos
ROS-20220125-13
2022-01-25 00:00:00