Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.147148
Category:Databases
Title:PostgreSQL < 9.6.24, 10.x < 10.19, 11.x < 11.14, 12.x < 12.9, 13.x < 13.5, 14.x < 14.1 Multiple Vulnerabilities - Linux
Summary:PostgreSQL is prone to multiple vulnerabilities.
Description:Summary:
PostgreSQL is prone to multiple vulnerabilities.

Vulnerability Insight:
The following vulnerabilities exist:

- CVE-2021-23214: Server processes unencrypted bytes from man-in-the-middle

- CVE-2021-23222: libpq processes unencrypted bytes from man-in-the-middle

Affected Software/OS:
PostgreSQL prior to version 9.6.24, version 10.x through 10.18,
11.x through 11.13, 12.x through 12.8, 13.x through 13.4 and version 14.0.

Solution:
Update to version 9.6.24, 10.19, 11.14, 12.9, 13.5, 14.1 or
later.

CVSS Score:
5.1

CVSS Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2021-23214
https://security.gentoo.org/glsa/202211-04
https://bugzilla.redhat.com/show_bug.cgi?id=2022666
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=28e24125541545483093819efae9bca603441951
https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951
https://www.postgresql.org/support/security/CVE-2021-23214/
Common Vulnerability Exposure (CVE) ID: CVE-2021-23222
https://bugzilla.redhat.com/show_bug.cgi?id=2022675
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=d83cdfdca9d918bbbd6bb209139b94c954da7228
https://github.com/postgres/postgres/commit/160c0258802d10b0600d7671b1bbea55d8e17d45
https://www.postgresql.org/support/security/CVE-2021-23222/
CopyrightCopyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.