Lucene search

PostgresNIO processes unencrypted bytes from man-in-the-middle

🗓️ 10 May 2023 19:16:20Reported by GitHub Advisory DatabaseType

PostgresNIO vulnerability to man-in-the-middle attacks despite TLS

Reporter	Title	Published	Views	Family All 199
OSV	CVE-2023-31136	9 May 202314:15	–	osv
OSV	PostgresNIO processes unencrypted bytes from man-in-the-middle	10 May 202319:20	–	osv
OSV	postgresql10-10.19-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	postgresql11-11.14-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	postgresql-13 - security update	11 Nov 202100:00	–	osv
OSV	postgresql12-12.9-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	postgresql13-13.5-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	postgresql-11 - security update	11 Nov 202100:00	–	osv
OSV	postgresql-9.6 - security update	12 Nov 202100:00	–	osv
OSV	postgresql-10, postgresql-12, postgresql-13 vulnerabilities	11 Nov 202118:26	–	osv

Vulners

Node

vapor postgres-nioRange<1.14.2

Source	Link
github	www.github.com/vapor/postgres-nio/security/advisories/GHSA-9cfh-vx93-84vv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-31136
github	www.github.com/apple/swift-nio/pull/2419
github	www.github.com/vapor/postgres-nio/commit/2df54bc94607f44584ae6ffa74e3cd754fffafc7
github	www.github.com/advisories/GHSA-467w-rrqc-395f
github	www.github.com/advisories/GHSA-735f-7qx4-jqq5
github	www.github.com/vapor/postgres-nio/releases/tag/1.14.2
postgresql	www.postgresql.org/support/security/CVE-2021-23214/
postgresql	www.postgresql.org/support/security/CVE-2021-23222/
github	www.github.com/advisories/GHSA-9cfh-vx93-84vv

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 May 2023 19:20Current

6.9Medium risk

Vulners AI Score6.9

EPSS0.003

CWE-522