CVE-2021-3393
Fixed in a distro release EPSS 1%
An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
Products: postgresql, redhat software_collections, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 |
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2758+4f4474df |
| Alpine 3.10 | postgresql | 11.11-r0 |
| Alpine 3.11 | postgresql | 12.6-r0 |
| Alpine 3.12 | postgresql | 12.6-r0 |
| Alpine 3.13 | postgresql | 13.2-r0 |
| Alpine 3.14 | postgresql | 13.2-r0 |
| Alpine 3.15 | postgresql13 | 13.2-r0 |
| Alpine 3.15 | postgresql14 | 13.2-r0 |
| Alpine 3.16 | postgresql13 | 13.2-r0 |
| Alpine 3.16 | postgresql14 | 13.2-r0 |
| Alpine 3.17 | postgresql14 | 13.2-r0 |
| Alpine 3.17 | postgresql15 | 13.2-r0 |
| Alpine 3.18 | postgresql14 | 13.2-r0 |
| Alpine 3.18 | postgresql15 | 13.2-r0 |
| Alpine 3.19 | postgresql15 | 13.2-r0 |
| Alpine 3.20 | postgresql15 | 13.2-r0 |
| Alpine 3.9 | postgresql | 11.11-r0 |
| Arch Linux | postgresql | 13.2-1 |
| Debian 11 | postgresql-13 | 13.2-1 |
| Red Hat Enterprise Linux 8 | pgaudit | 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | pgaudit-debuginfo | 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | pgaudit-debugsource | 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs-debuginfo | 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgres-decoderbufs-debugsource | 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-contrib | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-contrib-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-debugsource | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-docs | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-docs-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-plperl | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-plperl-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-plpython3 | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-plpython3-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-pltcl | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-pltcl-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-server | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-server-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-server-devel | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-server-devel-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-static | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-test | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-test-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-test-rpm-macros | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-devel | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat Enterprise Linux 8 | postgresql-upgrade-devel-debuginfo | 0:12.7-1.module+el8.4.0+11288+c193d6d7 |
| Red Hat rhel eus 8.2 | pgaudit | 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | pgaudit-debuginfo | 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | pgaudit-debugsource | 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | postgres-decoderbufs | 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | postgres-decoderbufs-debuginfo | 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | postgres-decoderbufs-debugsource | 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| Red Hat rhel eus 8.2 | postgresql | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-contrib | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-contrib-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-debugsource | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-docs | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-docs-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-plperl | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-plperl-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-plpython3 | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-plpython3-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-pltcl | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-pltcl-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-server | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-server-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-server-devel | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-server-devel-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-static | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-test | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-test-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-test-rpm-macros | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-upgrade | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-upgrade-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-upgrade-devel | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel eus 8.2 | postgresql-upgrade-devel-debuginfo | 0:12.7-1.module+el8.2.0+11251+7a3cc531 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-contrib | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-contrib-syspaths | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-debuginfo | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-devel | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-docs | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-libs | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-plperl | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-plpython | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-pltcl | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-server | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-server-syspaths | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-static | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-syspaths | 0:12.7-1.el7 |
| Red Hat rhel software collections 3 | rh-postgresql12-postgresql-test | 0:12.7-1.el7 |
| Rocky Linux 8 | pgaudit | 0:1.4.0-6.module+el8.4.0+587+d46efd10 |
| Rocky Linux 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.5.0+684+c3892ef9 |
| Rocky Linux 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.4.0+424+71d47d9a |
| Rocky Linux 8 | postgresql | 0:12.7-1.module+el8.4.0+545+ca56da2e |
| SUSE Enterprise Storage 6 | postgresql12 | 12.6-3.21.4 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | postgresql12 | 12.6-3.21.4 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | postgresql12 | 12.6-3.21.4 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | postgresql12 | 12.6-8.16.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | postgresql13 | 13.2-5.6.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | postgresql13 | 13.2-5.6.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | postgresql12 | 12.6-8.16.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 | postgresql13 | 13.2-5.6.1 |
| SUSE Linux Enterprise Server 12 SP5 | postgresql12 | 12.7-3.15.3 |
| SUSE Linux Enterprise Server 12 SP5 | postgresql13 | 13.2-3.6.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | postgresql12 | 12.6-3.21.4 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | postgresql12 | 12.6-3.21.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | postgresql12 | 12.7-3.15.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | postgresql13 | 13.2-3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | postgresql12 | 12.6-3.21.4 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | postgresql12 | 12.7-3.15.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | postgresql13 | 13.2-3.6.1 |
| SUSE Manager Proxy 4.0 | postgresql12 | 12.6-3.21.4 |
| SUSE Manager Retail Branch Server 4.0 | postgresql12 | 12.6-3.21.4 |
| SUSE Manager Server 4.0 | postgresql12 | 12.6-3.21.4 |
| Ubuntu 20.04 LTS | postgresql-12 | 12.6-0ubuntu0.20.04.1 |
| openSUSE Leap 15.2 | postgresql12 | 12.6-lp152.3.16.1 |
| openSUSE Tumbleweed | postgresql11 | 11.13-1.3 |
| openSUSE Tumbleweed | postgresql12 | 12.8-1.3 |
| openSUSE Tumbleweed | postgresql13 | 13.4-1.3 |
| openSUSE Tumbleweed | postgresql14 | 14.5-2.1 |
| openSUSE Tumbleweed | postgresql15 | 15.4-2.1 |
| openSUSE Tumbleweed | postgresql16 | 16.4-1.1 |
| openSUSE Tumbleweed | postgresql17 | 17.6-2.1 |