Red Hat Security AdvisoryRHSA-2021:5197
rh-postgresql12-postgresql security update
Released 2021-12-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql12-postgresql-12.9-1.el7, rh-postgresql12-postgresql-contrib-12.9-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.9-1.el7 +11
- Red Hat Software Collections for RHEL(v. 7) rh-postgresql12-postgresql-12.9-1.el7, rh-postgresql12-postgresql-contrib-12.9-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.9-1.el7 +11
Fixes 3 records
Priority LOW 39
When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established,…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01901 · Published 2022-03-04 · Partial fix CWE-89
Priority LOW 32
A flaw was found in postgresql.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01442 · Published 2022-03-02 · Fixed CWE-200
Priority LOW 29
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01501 · Published 2022-03-02 · Partial fix CWE-522
