Lucene search
FedoraCVELIST:CVE-2021-43766HistoryAug 25, 2022 - 5:27 p.m.
CVE-2021-43766
2022-08-2517:27:31
CWE-89
fedora
www.cve.org
14
odyssey
server
sql
injection
ssl
certificate
verification
encryption
postgresql
man-in-the-middle
Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption. This is similar to CVE-2021-23214 for PostgreSQL.
CNA Affected
[
{
"product": "Odyssey",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Odyssey 1.1"
}
]
}
]Related
nvd
nvd
CVE-2021-43766
2022-08-25 18:15:09
CVE-2021-23214
2022-03-04 16:15:08
osv
osv
CVE-2021-43766
2022-08-25 18:15:09
CVE-2021-23214
2022-03-04 16:15:08
BIT-postgresql-2021-23214
2024-03-06 11:05:31
prion
prion
Sql injection
2022-08-25 18:15:00
Sql injection
2022-03-04 16:15:00
cve
cve
CVE-2021-43766
2022-08-25 18:15:09
CVE-2021-23214
2022-03-04 16:15:08
nessus
nessus
EulerOS 2.0 SP8 : postgresql-10.5 (EulerOS-SA-2023-1346)
2023-02-08 00:00:00
Amazon Linux AMI : postgresql96 (ALAS-2023-1661)
2023-01-24 00:00:00
Amazon Linux AMI : postgresql92 (ALAS-2023-1657)
2023-01-24 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for postgresql-10.5 (EulerOS-SA-2023-1346)
2023-02-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3761-1)
2021-11-23 00:00:00
Debian: Security Advisory (DSA-5007-1)
2021-11-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-43766 affecting package postgresql 12.8-1
2022-10-13 00:40:15
CVE-2021-23214 affecting package postgresql for versions less than 14.2-1
2022-04-26 20:17:02
CVE-2021-23214 affecting package postgresql 12.8-1
2022-03-19 16:40:54
ibm
ibm
rocky
rocky
postgresql:10 security update
2022-05-10 08:03:34
postgresql:12 security update
2021-12-21 09:10:31
postgresql:13 security update
2021-12-21 09:10:35
veracode
veracode
Man-in-the-Middle (MitM)
2021-11-14 07:40:11
amazon
amazon
Medium: postgresql93
2023-01-18 20:56:00
Medium: postgresql92
2023-01-18 20:56:00
Medium: postgresql95
2023-01-18 20:56:00
almalinux
almalinux
Moderate: postgresql:10 security update
2022-05-10 08:03:34
Moderate: postgresql:12 security update
2021-12-21 09:10:31
Moderate: postgresql:13 security update
2021-12-21 09:10:35
oraclelinux
oraclelinux
postgresql:10 security update
2022-05-17 00:00:00
postgresql:12 security update
2021-12-22 00:00:00
postgresql:13 security update
2021-12-22 00:00:00
archlinux
archlinux
[ASA-202203-1] postgresql: man-in-the-middle
2022-03-25 00:00:00
[ASA-202204-1] postgresql: man-in-the-middle
2022-04-04 00:00:00
cvelist
cvelist
CVE-2021-23214
2022-03-04 00:00:00
redhat
redhat
(RHSA-2022:1830) Moderate: postgresql:10 security update
2022-05-10 08:03:34
(RHSA-2021:5235) Moderate: postgresql:12 security update
2021-12-21 09:10:31
(RHSA-2021:5236) Moderate: postgresql:13 security update
2021-12-21 09:10:35
debiancve
debiancve
CVE-2021-23214
2022-03-04 16:15:08
ubuntucve
ubuntucve
CVE-2021-23214
2021-11-11 00:00:00
redhatcve
redhatcve
CVE-2021-23214
2022-04-26 22:23:51
alpinelinux
alpinelinux
CVE-2021-23214
2022-03-04 16:15:08
mageia
mageia
Updated postgresql packages fix security vulnerability
2021-11-25 16:06:13
suse
suse
Security update for postgresql12 (important)
2021-11-22 00:00:00
Security update for postgresql13 (important)
2021-11-22 00:00:00
Security update for postgresql14 (important)
2021-11-22 00:00:00
postgresql
postgresql
Vulnerability in client (CVE-2021-23222)
2021-11-11 00:00:00
Vulnerability in core server (CVE-2021-23214)
2021-11-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package postgresql15 version 14.1-alt1
2021-11-10 00:00:00
Security fix for the ALT Linux 10 package postgresql15-1C version 13.3-alt5
2021-11-10 00:00:00
freebsd
freebsd
PostgreSQL -- Possible man-in-the-middle attacks
2021-11-08 00:00:00
debian
debian
[SECURITY] [DSA 5006-1] postgresql-11 security update
2021-11-11 21:49:53
[SECURITY] [DLA 2817-1] postgresql-9.6 security update
2021-11-12 08:46:22
[SECURITY] [DSA 5007-1] postgresql-13 security update
2021-11-11 21:52:56
ubuntu
ubuntu
PostgreSQL vulnerabilities
2022-09-28 00:00:00
PostgreSQL vulnerabilities
2021-11-11 00:00:00
kaspersky
kaspersky
KLA12378 Multiple vulnerabilities in PostgreSQL
2021-11-11 00:00:00
redos
redos
ROS-20220125-13
2022-01-25 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: pgbouncer-1.16.1-1.fc35
2021-12-31 01:21:38
gitlab
gitlab
PostgresNIO processes unencrypted bytes from man-in-the-middle
2023-05-10 00:00:00
github
github
PostgresNIO processes unencrypted bytes from man-in-the-middle
2023-05-10 19:20:16
gentoo
gentoo
PostgreSQL: Multiple Vulnerabilities
2022-11-19 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00