Lucene search

Alpine Linux Development TeamALPINE:CVE-2020-25696

HistoryNov 23, 2020 - 10:15 p.m.

CVE-2020-25696

2020-11-2322:15:00

Alpine Linux Development Team

security.alpinelinux.org

0.004 Low

EPSS

Percentile

72.8%

JSON

A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchpostgresql14< 12.5-r0UNKNOWN
Alpineedge-mainnoarchpostgresql15< 12.5-r0UNKNOWN
Alpine3.10-mainnoarchpostgresql< 11.10-r0UNKNOWN
Alpine3.11-mainnoarchpostgresql< 12.5-r0UNKNOWN
Alpine3.12-mainnoarchpostgresql< 12.5-r0UNKNOWN
Alpine3.13-mainnoarchpostgresql< 12.5-r0UNKNOWN
Alpine3.14-mainnoarchpostgresql< 12.5-r0UNKNOWN
Alpine3.15-communitynoarchpostgresql12< 12.5-r0UNKNOWN
Alpine3.15-mainnoarchpostgresql14< 12.5-r0UNKNOWN
Alpine3.16-communitynoarchpostgresql12< 12.5-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	postgresql14	< 12.5-r0	UNKNOWN
Alpine	edge-main	noarch	postgresql15	< 12.5-r0	UNKNOWN
Alpine	3.10-main	noarch	postgresql	< 11.10-r0	UNKNOWN
Alpine	3.11-main	noarch	postgresql	< 12.5-r0	UNKNOWN
Alpine	3.12-main	noarch	postgresql	< 12.5-r0	UNKNOWN
Alpine	3.13-main	noarch	postgresql	< 12.5-r0	UNKNOWN
Alpine	3.14-main	noarch	postgresql	< 12.5-r0	UNKNOWN
Alpine	3.15-community	noarch	postgresql12	< 12.5-r0	UNKNOWN
Alpine	3.15-main	noarch	postgresql14	< 12.5-r0	UNKNOWN
Alpine	3.16-community	noarch	postgresql12	< 12.5-r0	UNKNOWN

Rows per page:

1-10 of 201

0.004 Low

EPSS

Percentile

72.8%

JSON

Related for ALPINE:CVE-2020-25696