Lucene search
HistoryAug 25, 2022 - 6:15 p.m.
CVE-2021-43766
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.3%
Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption. This is similar to CVE-2021-23214 for PostgreSQL.
Affected configurations
Node
odyssey_projectodysseyMatch1.1
Related
cve
cve
CVE-2021-43766
2022-08-25 18:15:09
CVE-2021-23214
2022-03-04 16:15:08
prion
prion
Sql injection
2022-08-25 18:15:00
Sql injection
2022-03-04 16:15:00
osv
osv
CVE-2021-43766
2022-08-25 18:15:09
Moderate: postgresql:10 security update
2022-05-10 08:03:34
Moderate: postgresql:10 security update
2022-05-10 08:03:34
cvelist
cvelist
CVE-2021-43766
2022-08-25 17:27:31
CVE-2021-23214
2022-03-04 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for postgresql-10.5 (EulerOS-SA-2023-1346)
2023-02-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3755-1)
2021-11-21 00:00:00
Debian: Security Advisory (DSA-5006-1)
2021-11-14 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : postgresql-10.5 (EulerOS-SA-2023-1346)
2023-02-08 00:00:00
AlmaLinux 8 : postgresql:10 (ALSA-2022:1830)
2022-05-12 00:00:00
Amazon Linux AMI : postgresql93 (ALAS-2023-1658)
2023-01-24 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-43766 affecting package postgresql 12.8-1
2022-10-13 00:40:15
CVE-2021-23214 affecting package postgresql for versions less than 14.2-1
2022-04-26 20:17:02
CVE-2021-23214 affecting package postgresql 12.8-1
2022-03-19 16:40:54
redhatcve
redhatcve
CVE-2021-23214
2022-04-26 22:23:51
debiancve
debiancve
CVE-2021-23214
2022-03-04 16:15:08
alpinelinux
alpinelinux
CVE-2021-23214
2022-03-04 16:15:08
amazon
amazon
Medium: postgresql94
2023-01-18 20:56:00
Medium: postgresql96
2023-01-18 20:56:00
Medium: postgresql95
2023-01-18 20:56:00
ubuntucve
ubuntucve
CVE-2021-23214
2021-11-11 00:00:00
archlinux
archlinux
[ASA-202204-1] postgresql: man-in-the-middle
2022-04-04 00:00:00
[ASA-202203-1] postgresql: man-in-the-middle
2022-03-25 00:00:00
redhat
redhat
(RHSA-2022:1830) Moderate: postgresql:10 security update
2022-05-10 08:03:34
(RHSA-2021:5236) Moderate: postgresql:13 security update
2021-12-21 09:10:35
(RHSA-2021:5235) Moderate: postgresql:12 security update
2021-12-21 09:10:31
almalinux
almalinux
Moderate: postgresql:10 security update
2022-05-10 08:03:34
Moderate: postgresql:13 security update
2021-12-21 09:10:35
Moderate: postgresql:12 security update
2021-12-21 09:10:31
nvd
nvd
CVE-2021-23214
2022-03-04 16:15:08
oraclelinux
oraclelinux
postgresql:10 security update
2022-05-17 00:00:00
postgresql:12 security update
2021-12-22 00:00:00
postgresql:13 security update
2021-12-22 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2021-11-14 07:40:11
rocky
rocky
postgresql:10 security update
2022-05-10 08:03:34
postgresql:12 security update
2021-12-21 09:10:31
postgresql:13 security update
2021-12-21 09:10:35
debian
debian
[SECURITY] [DSA 5007-1] postgresql-13 security update
2021-11-11 21:52:56
[SECURITY] [DLA 2817-1] postgresql-9.6 security update
2021-11-12 08:46:22
[SECURITY] [DSA 5006-1] postgresql-11 security update
2021-11-11 21:49:53
altlinux
altlinux
suse
suse
Security update for postgresql10 (important)
2021-12-14 00:00:00
Security update for postgresql14 (important)
2021-11-22 00:00:00
Security update for postgresql10 (important)
2021-12-15 00:00:00
kaspersky
kaspersky
KLA12378 Multiple vulnerabilities in PostgreSQL
2021-11-11 00:00:00
freebsd
freebsd
PostgreSQL -- Possible man-in-the-middle attacks
2021-11-08 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2022-09-28 00:00:00
PostgreSQL vulnerabilities
2021-11-11 00:00:00
redos
redos
ROS-20220125-13
2022-01-25 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2021-11-25 16:06:13
fedora
fedora
[SECURITY] Fedora 35 Update: pgbouncer-1.16.1-1.fc35
2021-12-31 01:21:38
github
github
PostgresNIO processes unencrypted bytes from man-in-the-middle
2023-05-10 19:20:16
gentoo
gentoo
PostgreSQL: Multiple Vulnerabilities
2022-11-19 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.3%
Related for NVD:CVE-2021-43766