Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports

Toggle filters

1 – 10 of 11 results

CVE-2022-2625

Medium priority

Some fixes available 3 of 5

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in...

7 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-14, postgresql-9.1...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-10 Not in release Not in release Not in release Fixed Not in release
postgresql-12 Not in release Not in release Fixed Not in release Not in release
postgresql-13 Not in release Not in release Not in release Not in release Not in release
postgresql-14 Not in release Fixed Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release Not in release
postgresql-9.5 Not in release Not in release Not in release Not in release Ignored
Show all 7 packages Show less packages

CVE-2022-1552

Medium priority

Some fixes available 5 of 6

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER,...

7 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-14, postgresql-9.1...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-10 Not in release Not in release Not in release Fixed Not in release
postgresql-12 Not in release Not in release Fixed Not in release Not in release
postgresql-13 Not in release Not in release Not in release Not in release Not in release
postgresql-14 Not in release Fixed Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release Not in release
postgresql-9.5 Not in release Not in release Not in release Not in release Fixed
Show all 7 packages Show less packages

CVE-2021-23222

Medium priority

Some fixes available 5 of 6

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-10 Not in release Not in release Not in release Fixed Not in release
postgresql-12 Not in release Not in release Fixed Not in release Not in release
postgresql-13 Not in release Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release Not in release
postgresql-9.5 Not in release Not in release Not in release Not in release Fixed
Show less packages

CVE-2021-23214

Medium priority

Some fixes available 5 of 6

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-10 Not in release Not in release Not in release Fixed Not in release
postgresql-12 Not in release Not in release Fixed Not in release Not in release
postgresql-13 Not in release Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release Not in release
postgresql-9.5 Not in release Not in release Not in release Not in release Fixed
Show less packages

CVE-2021-3677

Medium priority
Fixed

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-10 — Not in release Not in release Not affected Not in release
postgresql-12 — Not in release Fixed Not in release Not in release
postgresql-13 — Not in release Not in release Not in release Not in release
postgresql-9.1 — Not in release Not in release Not in release Not in release
postgresql-9.3 — Not in release Not in release Not in release Not in release
postgresql-9.5 — Not in release Not in release Not in release Not affected
Show less packages

CVE-2021-32027

Medium priority

Some fixes available 5 of 6

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-10 Not in release Not in release Not in release Fixed Not in release
postgresql-12 Not in release Not in release Fixed Not in release Not in release
postgresql-13 Not in release Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release Not in release
postgresql-9.5 Not in release Not in release Not in release Not in release Fixed
Show less packages

CVE-2021-32029

Medium priority

Some fixes available 3 of 4

A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-10 Not in release Not in release Not in release Not affected Not in release
postgresql-12 Not in release Not in release Fixed Not in release Not in release
postgresql-13 Not in release Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release Not in release
postgresql-9.5 Not in release Not in release Not in release Not in release Not affected
Show less packages

CVE-2021-32028

Medium priority

Some fixes available 4 of 6

A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from...

6 affected packages

postgresql-10, postgresql-12, postgresql-13, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-10 Not in release Not in release Not in release Fixed Not in release
postgresql-12 Not in release Not in release Fixed Not in release Not in release
postgresql-13 Not in release Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release Not in release
postgresql-9.5 Not in release Not in release Not in release Not in release Needs evaluation
Show less packages

CVE-2021-3449

High priority

Some fixes available 15 of 16

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial...

10 affected packages

edk2, nodejs, openssl, openssl1.0, postgresql-10...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
edk2 Not affected Not affected Not affected Not affected Not affected
nodejs Not affected Not affected Not affected Not affected Not affected
openssl Fixed Fixed Fixed Fixed Not affected
openssl1.0 Not in release Not in release Not in release Not affected Not in release
postgresql-10 Not in release Not in release Not in release Fixed Not in release
postgresql-12 Not in release Not in release Fixed Not in release Not in release
postgresql-13 Not in release Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release Not in release
postgresql-9.5 Not in release Not in release Not in release Not in release Not affected
Show all 10 packages Show less packages

CVE-2021-20229

Medium priority

Not in release

A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to...

1 affected packages

postgresql-13

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
postgresql-13 — — Not in release Not in release Not in release
Show less packages
  1. Previous page
  2. 1
  3. 2
  4. Next page
Export to JSON