KLA12177 Multiple vulnerabilities in PostgreSQL

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability can be exploited to obtain sensitive information.
2. A buffer overflow vulnerability can be exploited to execute arbitrary code.

Original advisories

PostgreSQL News

Related products

PostgreSQL

CVE list

CVE-2021-32028 high

CVE-2021-32027 critical

CVE-2021-32029 high

Solution

Update to the latest version

Download PostgreSQL

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Affected Products

• PostgreSQL 9.6 earlier than 9.6.22PostgreSQL 10 earlier than 10.17PostgreSQL 11 earlier than 11.12PostgreSQL 12 earlier than 12.7PostgreSQL 13 earlier than 13.3