CVE-2021-32029
Fixed in a distro release EPSS 2%
A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
Products: postgresql, redhat jboss_enterprise_application_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | pgaudit | 1.5.0-1.module_el8.6.0+2760+1746ec94 |
| AlmaLinux 8 | pgaudit | 1.5.0-1.module_el8.5.0+2607+8c0fd184 |
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 |
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2758+4f4474df |
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.5.0+2607+8c0fd184 |
| Alpine 3.10 | postgresql | 11.12-r0 |
| Alpine 3.11 | postgresql | 12.7-r0 |
| Alpine 3.12 | postgresql | 12.7-r0 |
| Alpine 3.13 | postgresql | 13.3-r0 |
| Alpine 3.14 | postgresql | 13.3-r0 |
| Alpine 3.15 | postgresql13 | 13.3-r0 |
| Alpine 3.15 | postgresql14 | 13.3-r0 |
| Alpine 3.16 | postgresql13 | 13.3-r0 |
| Alpine 3.16 | postgresql14 | 13.3-r0 |
| Alpine 3.17 | postgresql14 | 13.3-r0 |
| Alpine 3.17 | postgresql15 | 13.3-r0 |
| Alpine 3.18 | postgresql14 | 13.3-r0 |
| Alpine 3.18 | postgresql15 | 13.3-r0 |
| Alpine 3.19 | postgresql15 | 13.3-r0 |
| Alpine 3.20 | postgresql15 | 13.3-r0 |
| Arch Linux | postgresql | 13.3-1 |
| Debian 10 | postgresql-11 | 11.12-0+deb10u1 |
| Debian 11 | postgresql-13 | 13.3-1 |
| Red Hat Enterprise Linux 8 | pgaudit | 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | pgaudit | 0:1.5.0-1.module+el8.4.0+8873+b821c30a |
| Red Hat Enterprise Linux 8 | pgaudit-debuginfo | 0:1.5.0-1.module+el8.4.0+8873+b821c30a |
| Red Hat Enterprise Linux 8 | pgaudit-debuginfo | 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | pgaudit-debugsource | 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | pgaudit-debugsource | 0:1.5.0-1.module+el8.4.0+8873+b821c30a |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.4.0+8873+b821c30a |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs-debuginfo | 0:0.10.0-2.module+el8.4.0+8873+b821c30a |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs-debuginfo | 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs-debugsource | 0:0.10.0-2.module+el8.4.0+8873+b821c30a |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs-debugsource | 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-contrib | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-contrib | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-contrib-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-contrib-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-debugsource | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-debugsource | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-docs | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-docs | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-docs-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-docs-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-plperl | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-plperl | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-plperl-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-plperl-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-plpython3 | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-plpython3 | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-plpython3-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-plpython3-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-pltcl | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-pltcl | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-pltcl-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-pltcl-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-server | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-server | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-server-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-server-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-server-devel | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-server-devel | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-server-devel-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-server-devel-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-static | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-static | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-test | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-test | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-test-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-test-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-test-rpm-macros | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-test-rpm-macros | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-devel | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-devel | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-devel-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-devel-debuginfo | 0:13.3-1.module+el8.4.0+11254+85259292 |
| Red Hat rhel eus 8.2 | pgaudit | 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | pgaudit-debuginfo | 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | pgaudit-debugsource | 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | postgres-decoderbufs | 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | postgres-decoderbufs-debuginfo | 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | postgres-decoderbufs-debugsource | 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | postgresql | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-contrib | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-contrib-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-debugsource | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-docs | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-docs-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-plperl | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-plperl-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-plpython3 | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-plpython3-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-pltcl | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-pltcl-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-server | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-server-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-server-devel | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-server-devel-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-static | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-test | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-test-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-test-rpm-macros | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-upgrade | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-upgrade-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-upgrade-devel | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-upgrade-devel-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-contrib | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-contrib-syspaths | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-debuginfo | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-devel | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-docs | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-libs | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-plperl | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-plpython | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-pltcl | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-server | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-server-syspaths | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-static | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-syspaths | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-test | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-contrib | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-contrib-syspaths | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-debuginfo | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-devel | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-docs | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-libs | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-plperl | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-plpython | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-plpython3 | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-pltcl | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-server | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-server-syspaths | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-static | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-syspaths | 0:13.3-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql13-postgresql-test | 0:13.3-1.el7 |
| Rocky Linux 8 | pgaudit | 0:1.4.0-6.module+el8.4.0+587+d46efd10 |
| Rocky Linux 8 | pgaudit | 0:1.5.0-1.module+el8.4.0+546+3620623e |
| Rocky Linux 8 | pgaudit | 0:1.5.0-1.module+el8.5.0+684+c3892ef9 |
| Rocky Linux 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.5.0+684+c3892ef9 |
| Rocky Linux 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.4.0+424+71d47d9a |
| Rocky Linux 8 | postgresql | 0:13.3-1.module+el8.4.0+546+3620623e |
| Rocky Linux 8 | postgresql | 0:12.7-1.module+el8.4.0+545+ca56da2e |
| SUSE Enterprise Storage 6 | postgresql12 | 12.12-150100.3.33.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | postgresql12 | 12.12-150100.3.33.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | postgresql12 | 12.12-150100.3.33.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | postgresql12 | 12.7-8.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | postgresql13 | 13.3-5.10.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | postgresql13 | 13.3-5.10.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP3 | postgresql12 | 12.7-8.20.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | postgresql13 | 13.3-5.10.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | postgresql13 | 13.3-5.10.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | postgresql12 | 12.7-8.20.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | postgresql13 | 13.3-5.10.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | postgresql13 | 13.3-5.10.1 |
| SUSE Linux Enterprise Server 12 SP5 | postgresql12 | 12.7-3.15.3 |
| SUSE Linux Enterprise Server 12 SP5 | postgresql13 | 13.3-3.9.3 |
| SUSE Linux Enterprise Server 15 SP1-BCL | postgresql12 | 12.12-150100.3.33.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | postgresql12 | 12.12-150100.3.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | postgresql12 | 12.7-3.15.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | postgresql13 | 13.3-3.9.3 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | postgresql12 | 12.12-150100.3.33.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | postgresql12 | 12.7-3.15.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | postgresql13 | 13.3-3.9.3 |
| Ubuntu 18.04 LTS | postgresql-10 | 10.17-0ubuntu0.18.04.1 |
| Ubuntu 20.04 LTS | postgresql-12 | 12.7-0ubuntu0.20.04.1 |
| Ubuntu Pro 14.04 LTS | postgresql-9.3 | no fix |
| openSUSE Leap 15.3 | postgresql12 | 12.7-8.20.1 |
| openSUSE Leap 15.3 | postgresql13 | 13.3-5.10.1 |
| openSUSE Tumbleweed | postgresql11 | 11.13-1.3 |
| openSUSE Tumbleweed | postgresql12 | 12.8-1.3 |
| openSUSE Tumbleweed | postgresql13 | 13.4-1.3 |
| openSUSE Tumbleweed | postgresql14 | 14.5-2.1 |
| openSUSE Tumbleweed | postgresql15 | 15.4-2.1 |
| openSUSE Tumbleweed | postgresql16 | 16.4-1.1 |
| openSUSE Tumbleweed | postgresql17 | 17.6-2.1 |