![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.147148 |
Category: | Databases |
Title: | PostgreSQL < 9.6.24, 10.x < 10.19, 11.x < 11.14, 12.x < 12.9, 13.x < 13.5, 14.x < 14.1 Multiple Vulnerabilities - Linux |
Summary: | PostgreSQL is prone to multiple vulnerabilities. |
Description: | Summary: PostgreSQL is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2021-23214: Server processes unencrypted bytes from man-in-the-middle - CVE-2021-23222: libpq processes unencrypted bytes from man-in-the-middle Affected Software/OS: PostgreSQL prior to version 9.6.24, version 10.x through 10.18, 11.x through 11.13, 12.x through 12.8, 13.x through 13.4 and version 14.0. Solution: Update to version 9.6.24, 10.19, 11.14, 12.9, 13.5, 14.1 or later. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2021-23214 https://security.gentoo.org/glsa/202211-04 https://bugzilla.redhat.com/show_bug.cgi?id=2022666 https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=28e24125541545483093819efae9bca603441951 https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951 https://www.postgresql.org/support/security/CVE-2021-23214/ Common Vulnerability Exposure (CVE) ID: CVE-2021-23222 https://bugzilla.redhat.com/show_bug.cgi?id=2022675 https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=d83cdfdca9d918bbbd6bb209139b94c954da7228 https://github.com/postgres/postgres/commit/160c0258802d10b0600d7671b1bbea55d8e17d45 https://www.postgresql.org/support/security/CVE-2021-23222/ |
Copyright | Copyright (C) 2021 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |