PT-2021-3133

🗓️ 12 May 2021 00:00:00Reported by Positive TechnologiesType

PostgreSQL memory read flaw in UPDATE ... RETURNING lets authenticated users access server memory.

Reporter	Title	Published	Views	Family All 272
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerability in PostgreSQL (CVE-2021-32029)	6 Oct 202113:26	–	ibm
IBM Security Bulletins	Security Bulletin: PostgreSQL Vulnerability Affects IBM Sterling Connect:Direct for Microsoft Windows (CVE-2021-32029)	27 Sep 202109:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security Bypass Vulnerability in PostgreSQL Affects IBM Connect:Direct Web Services ( CVE-2021-3393)	26 May 202105:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Apache, Golang Go, and Linux Kernel affect IBM Spectrum Copy Data Management	10 Dec 202123:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of PostgreSQL, IBM Robotic Process Automation with Automation Anywhere is vulnerable to data confidentiality (CVE-2021-32029)	1 Apr 202215:07	–	ibm
IBM Security Bulletins	Security Bulletin: PostgreSQL Sensitive Information Exposure Vulnerability Affects IBM Connect:Direct Web Services (CVE-2021-32029)	23 Nov 202104:15	–	ibm
IBM Security Bulletins	Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere - CVE-2021-3393	26 Jul 202114:44	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package postgresql15-1C version 12.6-alt2	17 May 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql13 version 13.2-alt1	11 Feb 202100:00	–	altlinux

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3677
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:11187-1
osv	www.osv.dev/vulnerability/CVE-2021-23214
osv	www.osv.dev/vulnerability/CVE-2021-32029
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:13243-1
ubuntu	www.ubuntu.com/security/notices/USN-4972-1
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/6AKC5KVKWVYW4R23NQPYSXI57JD6CIYN
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/YKAEBUWSUHMGHAQQGZGGJL4XNRQXGZEZ
suse	www.suse.com/security/cve/CVE-2019-10130
osv	www.osv.dev/vulnerability/DSA-4915-1

18 Sep 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5 - 9.8

CVSS 24

EPSS0.01504