DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2021-02-11
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3393US | medium4.3 | — | ||
An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular co… | ||||
| CVE-2021-20229US | medium4.3OT elevated | — | ||
A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table.… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-2372 vom 2021-06-13external
- Red Hat Security Advisory RHSA-2021:2372 vom 2021-06-10external
- Red Hat Security Advisory RHSA-2021:2389 vom 2021-06-14external
- Amazon Linux Security Advisory ALASPOSTGRESQL12-2023-004 vom 2023-09-27external
- openSUSE Security Update OPENSUSE-SU-2024:14360-1 vom 2024-09-24external
- openSUSE Security Update OPENSUSE-SU-2025:15580-1 vom 2025-09-27external
- SUSE Security Update SUSE-SU-2021:0543-1 vom 2021-02-22external
- SUSE Security Update SUSE-SU-2021:0545-1 vom 2021-02-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan