CVEvulnerability

CVE-2021-32027

8.8 HIGH Published 2021-06-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-190

Description

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected configurations

• postgresql postgresql (>= 9.6.0 < 9.6.22) • postgresql postgresql (>= 10.0 < 10.17) • postgresql postgresql (>= 11.0 < 11.12) • postgresql postgresql (>= 12.0 < 12.7) • postgresql postgresql (>= 13.0 < 13.3) • redhat jboss enterprise application platform 7.0.0 • redhat software collections • redhat enterprise linux 7.0 • redhat enterprise linux 8.0

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References