CVE-2021-23222
EUVD-2021-1032402.03.2022, 23:15
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| postgresql | postgresql | 9.6 ≤ 𝑥 < 9.6.24 |
| postgresql | postgresql | 10.0 ≤ 𝑥 < 10.19 |
| postgresql | postgresql | 11.0 ≤ 𝑥 < 11.14 |
| postgresql | postgresql | 12.0 ≤ 𝑥 < 12.9 |
| postgresql | postgresql | 13.0 ≤ 𝑥 < 13.5 |
| postgresql | postgresql | 14.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| postgresql-10 |
| ||||||||||||||||||||||
| postgresql-12 |
| ||||||||||||||||||||||
| postgresql-13 |
| ||||||||||||||||||||||
| postgresql-9.1 |
| ||||||||||||||||||||||
| postgresql-9.3 |
| ||||||||||||||||||||||
| postgresql-9.5 |
|
Common Weakness Enumeration
References