PT-2021-3839 · Unknown+10 · Postgresql+9

Msiddiqu · Published 2021-08-11 · Updated 2026-04-03 · CVE-2021-3677

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PostgreSQL (affected versions not specified)

Description The issue is related to a flaw in PostgreSQL that allows an attacker to read arbitrary bytes of server memory using a specially crafted query. In the default configuration, any authenticated database user can exploit this issue at will, without needing the ability to create objects. The attack's feasibility may be affected by server settings, such as max worker processes=0, but undiscovered variants of the attack may not be dependent on this setting.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

SQL injection

Weakness Enumeration

CWE-200

CWE-89

Related Identifiers

ALSA-2021:5235

ALSA-2021:5236

ALT-PU-2021-2482

ALT-PU-2021-2483

ALT-PU-2021-2484

ALT-PU-2021-2485

ALT-PU-2021-2531

ALT-PU-2021-2532

ALT-PU-2021-2533

ALT-PU-2021-2534

ALT-PU-2021-2603

ALT-PU-2021-2604

ALT-PU-2021-2605

ALT-PU-2021-3564

ALT-PU-2021-3567

ALT-PU-2021-3600

ALT-PU-2022-1109

AZL-8902

BDU:2021-04174

BIT-POSTGRESQL-2021-3677

CESA-2021_5235

CESA-2021_5236

CLEANSTART-2026-FW42039

CLEANSTART-2026-HJ04971

CVE-2021-3677

ECHO-31F9-F40E-D8E6

JLSEC-2026-35

MGASA-2021-0424

OESA-2022-1706

OESA-2025-1335

OPENSUSE-SU-2021:3255-1

OPENSUSE-SU-2021:3256-1

OPENSUSE-SU-2021_3255-1

OPENSUSE-SU-2021_3256-1

OPENSUSE-SU-2024:11185-1

OPENSUSE-SU-2024:11186-1

OPENSUSE-SU-2024:11187-1

RHSA-2021:5179

RHSA-2021:5197

RHSA-2021:5235

RHSA-2021:5236

RHSA-2021_5235

RHSA-2021_5236

RHSA-2022:4931

RLSA-2021:5235

RLSA-2021:5236

SUSE-SU-2021:3119-1

SUSE-SU-2021:3120-1

SUSE-SU-2021:3255-1

SUSE-SU-2021:3256-1

SUSE-SU-2021_3119-1

SUSE-SU-2021_3120-1

SUSE-SU-2021_3255-1

SUSE-SU-2021_3256-1

SUSE-SU-2022:2958-1

USN-5038-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Postgresql

Red Hat

Rocky Linux

Suse

Ubuntu

References · 195

• https://ubuntu.com/security/notices/USN-5038-1?_ga=2.147731454.833616851.1629051722-1935390015.1629051722 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:5236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39417 · Security Note
• https://postgresql.org/support/security/CVE-2021-3677 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-5236.html · Vendor Advisory
• https://security.gentoo.org/glsa/202211-04 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-10976 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-14349 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-2625 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-7546 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-32027 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-25695 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3256-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41862 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-7547 · Security Note