Read the docs
TI-2020-11220 Aliases CVE-2020-14349GHSA-2783-h34h-q54q

Uncontrolled search path in PostgreSQL

Priority LOW 36CWE-427Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
High
Impact type
Code execution, SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 10 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-427 and CWE-89.

Summary

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.

Why it matters now

EPSS 0.02235 82nd percentileScored 2026-11-07
Fix Partial Red Hat: 8 advisoriesRed Hat: 10 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—PostgreSQLPostgreSQL versions before 12.4, before 11.9 and before 10.14—No fix listedCNA
  • PostgreSQL Vendor— Affected PostgreSQL versions before 12.4, before 11.9 and before 10.14 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*10.0 to before 10.14; 11.0 to before 11.9; 12.0 to before 12.4VulnerablePostgreSQL
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*15.2VulnerableopenSUSE
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* Versions 10.0 to before 10.14; 11.0 to before 11.9; 12.0 to before 12.4 Vulnerable ·PostgreSQL
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* Versions 15.2 Vulnerable ·openSUSE

Remediation

Red Hat 8 advisories

  • RHSA-2021:0988 Released 2021-03-25 · Red Hat rating Moderate
    rhvm-appliance security, bug fix, and enhancement update
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 rhvm-appliance-2:4.4-20210310.0.el8ev
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts rhvm-appliance-2:4.4-20210310.0.el8ev
  • RHSA-2021:0166 Released 2021-01-18 · Red Hat rating Important
    postgresql:10 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 8.1) postgresql-10.15-1.module+el8.1.0+9154+cd474635.aarch64::postgresql:10, postgresql-10.15-1.module+el8.1.0+9154+cd474635.ppc64le::postgresql:10, postgresql-10.15-1.module+el8.1.0+9154+cd474635.s390x::postgresql:10 +47
  • RHSA-2021:0163 Released 2021-01-18 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.aarch64::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.ppc64le::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.s390x::postgresql:12 +47
Show 5 more Red Hat advisories
  • RHSA-2020:5664 Released 2020-12-22 · Red Hat rating Important
    postgresql:10 security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.0) postgresql-10.15-1.module+el8.0.0+9155+4a85661a.ppc64le::postgresql:10, postgresql-10.15-1.module+el8.0.0+9155+4a85661a.src::postgresql:10, postgresql-10.15-1.module+el8.0.0+9155+4a85661a.x86_64::postgresql:10 +24
  • RHSA-2020:5620 Released 2020-12-17 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream (v. 8) pgaudit-1.4.0-4.module+el8.3.0+9042+664538f4.aarch64::postgresql:12, pgaudit-1.4.0-4.module+el8.3.0+9042+664538f4.ppc64le::postgresql:12, pgaudit-1.4.0-4.module+el8.3.0+9042+664538f4.s390x::postgresql:12 +47
  • RHSA-2020:5110 Released 2020-11-18 · Red Hat rating Moderate
    rh-postgresql10-postgresql security update
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql10-postgresql-10.14-1.el7, rh-postgresql10-postgresql-contrib-10.14-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.14-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-postgresql10-postgresql-10.14-1.el7, rh-postgresql10-postgresql-contrib-10.14-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.14-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-postgresql10-postgresql-10.14-1.el7, rh-postgresql10-postgresql-contrib-10.14-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.14-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql10-postgresql-10.14-1.el7, rh-postgresql10-postgresql-contrib-10.14-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.14-1.el7 +11
  • RHSA-2020:5112 Released 2020-11-16 · Red Hat rating Moderate
    rh-postgresql12-postgresql security update
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql12-postgresql-12.4-1.el7, rh-postgresql12-postgresql-contrib-12.4-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.4-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-postgresql12-postgresql-12.4-1.el7, rh-postgresql12-postgresql-contrib-12.4-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.4-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-postgresql12-postgresql-12.4-1.el7, rh-postgresql12-postgresql-contrib-12.4-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.4-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql12-postgresql-12.4-1.el7, rh-postgresql12-postgresql-contrib-12.4-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.4-1.el7 +11
  • RHSA-2020:3669 Released 2020-09-08 · Red Hat rating Moderate
    postgresql:10 security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 8) postgresql-10.14-1.module+el8.2.0+7801+be0fed80.aarch64::postgresql:10, postgresql-10.14-1.module+el8.2.0+7801+be0fed80.ppc64le::postgresql:10, postgresql-10.14-1.module+el8.2.0+7801+be0fed80.s390x::postgresql:10 +47

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    PostgreSQL — openSUSE-SU-2020:1228

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →
  • Advisory ·

    PostgreSQL — openSUSE-SU-2020:1244

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →
Show 5 more groups
  • Advisory ·

    PostgreSQL — openSUSE-SU-2020:1243

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →
  • Advisory ·

    PostgreSQL — openSUSE-SU-2020:1312

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →
  • Advisory ·

    PostgreSQL — openSUSE-SU-2020:1326

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →
  • Advisory ·

    PostgreSQL — GLSA-202008-13

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →
  • Advisory ·

    PostgreSQL — USN-4472-1

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Storage 3AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2020:3669, RHSA-2020:5620
Red Hat Enterprise Linux AppStream E4S (v. 8.0)Fixed RHSA-2020:5664
Red Hat Enterprise Linux AppStream EUS (v. 8.1)Fixed RHSA-2021:0166
Red Hat Enterprise Linux AppStream EUS (v. 8.2)Fixed RHSA-2021:0163
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2020:5110, RHSA-2020:5112
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)Fixed RHSA-2020:5110, RHSA-2020:5112
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)Fixed RHSA-2020:5110, RHSA-2020:5112
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:5110, RHSA-2020:5112
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2021:0988
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed RHSA-2021:0988
Not affected: 12 products
  • Red Hat Decision Manager 7
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Fuse 7
  • Red Hat JBoss Enterprise Application Platform 6
  • Red Hat JBoss Enterprise Application Platform 7
  • Red Hat Process Automation 7
  • Red Hat Software Collections
  • Red Hat build of Quarkus

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-14349
  2. 2026-10-03 Alias added: GHSA-2783-h34h-q54q

References

Advisory 9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences