CVE-2021-20229
Fixed in a distro release EPSS 1%
A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.
Products: postgresql, redhat software_collections, redhat enterprise_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.12 | postgresql | 12.6-r0 |
| Alpine 3.13 | postgresql | 13.2-r0 |
| Alpine 3.14 | postgresql | 13.2-r0 |
| Alpine 3.15 | postgresql13 | 13.2-r0 |
| Alpine 3.15 | postgresql14 | 13.2-r0 |
| Alpine 3.16 | postgresql13 | 13.2-r0 |
| Alpine 3.16 | postgresql14 | 13.2-r0 |
| Alpine 3.17 | postgresql14 | 13.2-r0 |
| Alpine 3.17 | postgresql15 | 13.2-r0 |
| Alpine 3.18 | postgresql14 | 13.2-r0 |
| Alpine 3.18 | postgresql15 | 13.2-r0 |
| Alpine 3.19 | postgresql15 | 13.2-r0 |
| Alpine 3.20 | postgresql15 | 13.2-r0 |
| Arch Linux | postgresql | 13.2-1 |
| Debian 11 | postgresql-13 | 13.2-1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | postgresql13 | 13.2-5.6.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | postgresql13 | 13.2-5.6.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | postgresql13 | 13.2-5.6.1 |
| SUSE Linux Enterprise Server 12 SP5 | postgresql13 | 13.2-3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | postgresql13 | 13.2-3.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | postgresql13 | 13.2-3.6.1 |
| openSUSE Tumbleweed | postgresql13 | 13.4-1.3 |
| openSUSE Tumbleweed | postgresql14 | 14.5-2.1 |
| openSUSE Tumbleweed | postgresql15 | 15.4-2.1 |
| openSUSE Tumbleweed | postgresql16 | 16.4-1.1 |
| openSUSE Tumbleweed | postgresql17 | 17.6-2.1 |