PT-2021-3134 · Unknown+10 · Postgresql+9

Andres Freund · Publicado 2021-05-12 · Atualizado 2026-04-03 · CVE-2021-32028

Positive Technologies (AI Summary) · Pt

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Nome do software vulnerável e versões afetadas

postgresql (versões afetadas não especificadas)

Descrição

Foi identificada uma falha no postgresql. Ao utilizar o comando INSERT ... ON CONFLICT ... DO UPDATE em uma tabela criada especificamente para esse fim, um usuário autenticado do banco de dados poderia ler bytes arbitrários da memória do servidor. A maior ameaça decorrente desse problema é à confidencialidade dos dados. Esse problema está relacionado a erros de divulgação de memória na implementação do comando INSERT ... ON CONFLICT ... DO UPDATE.

Recomendações

No momento, não há informações sobre uma versão mais recente que contenha uma correção para esse problema.

Correção

Memory Leak

Information Disclosure

Enumeração de Fraquezas

CWE-401

CWE-200

Identificadores relacionados

ALSA-2021:2360

ALSA-2021:2372

ALSA-2021:2375

ALT-PU-2021-1820

ALT-PU-2021-1821

ALT-PU-2021-1822

ALT-PU-2021-1823

ALT-PU-2021-1824

ALT-PU-2021-1826

ALT-PU-2021-1848

ALT-PU-2021-1849

ALT-PU-2021-1850

ALT-PU-2021-1851

ALT-PU-2021-1852

ALT-PU-2021-1902

ALT-PU-2021-1903

ALT-PU-2021-1904

ALT-PU-2021-1905

ALT-PU-2021-2604

ALT-PU-2021-3564

BDU:2021-02775

BIT-POSTGRESQL-2021-32028

CESA-2021_2360

CESA-2021_2361

CESA-2021_2372

CESA-2021_2375

CLEANSTART-2026-FW42039

CLEANSTART-2026-HJ04971

CVE-2021-32028

DLA-2662-1

DSA-4915-1

ECHO-6788-82B2-DD38

JLSEC-2026-32

OESA-2021-1439

OESA-2022-1706

OPENSUSE-SU-2021:0894-1

OPENSUSE-SU-2021:1785-1

OPENSUSE-SU-2021:1970-1

OPENSUSE-SU-2021:1994-1

OPENSUSE-SU-2021_0894-1

OPENSUSE-SU-2021_1785-1

OPENSUSE-SU-2021_1970-1

OPENSUSE-SU-2021_1994-1

OPENSUSE-SU-2024:11184-1

OPENSUSE-SU-2024:11185-1

OPENSUSE-SU-2024:11186-1

OPENSUSE-SU-2024:11187-1

OPENSUSE-SU-2024:12387-1

OPENSUSE-SU-2024:13243-1

OPENSUSE-SU-2024:14360-1

OPENSUSE-SU-2025:15580-1

RHSA-2021:2360

RHSA-2021:2361

RHSA-2021:2372

RHSA-2021:2375

RHSA-2021:2389

RHSA-2021:2390

RHSA-2021:2391

RHSA-2021:2392

RHSA-2021:2393

RHSA-2021:2394

RHSA-2021:2395

RHSA-2021:2396

RHSA-2021_2360

RHSA-2021_2361

RHSA-2021_2372

RHSA-2021_2375

RLSA-2021:2360

RLSA-2021:2361

RLSA-2021:2372

RLSA-2021:2375

SUSE-SU-2021:1782-1

SUSE-SU-2021:1783-1

SUSE-SU-2021:1784-1

SUSE-SU-2021:1785-1

SUSE-SU-2021:1785-2

SUSE-SU-2021:1970-1

SUSE-SU-2021:1994-1

SUSE-SU-2021:2777-1

SUSE-SU-2021:3481-1

SUSE-SU-2022:2958-1

USN-4972-1

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Postgresql

Red Hat

Rocky Linux

Suse

Ubuntu

Referências · 243

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FW42039.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FW42039 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HJ04971.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HJ04971 · Nota
• https://suse.com/security/cve/CVE-2019-10208 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1956877 · Correção
• https://security.gentoo.org/glsa/202211-04 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2021/suse-su-20211994-1 · Nota
• https://osv.dev/vulnerability/CVE-2017-7484 · Nota
• https://vulners.com/cve/CVE-2021-3393 · Nota
• https://suse.com/security/cve/CVE-2018-10915 · Nota
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.3 · Nota
• https://osv.dev/vulnerability/RLSA-2021:2375 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7485 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10130 · Nota de Segurança