CVE-2021-23214
- Source
- https://cve.org/CVERecord?id=CVE-2021-23214
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23214.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-23214
- Aliases
- Downstream
ALPINE (1)
AZL (1)
BELL (1)
CLEANSTART (5)
ECHO (1)
JLSEC (1)
MGASA (1)
openSUSE (13)
- openSUSE-SU-2021:1584-1
- openSUSE-SU-2021:3758-1
- openSUSE-SU-2021:3759-1
- openSUSE-SU-2021:3762-1
- openSUSE-SU-2021:4058-1
- openSUSE-SU-2024:11625-1
- openSUSE-SU-2024:11626-1
- openSUSE-SU-2024:11627-1
- openSUSE-SU-2024:11628-1
- openSUSE-SU-2024:11629-1
- openSUSE-SU-2024:13243-1
- openSUSE-SU-2024:14360-1
- openSUSE-SU-2025:15580-1
SUSE (10)
- Related
- Published
- 2022-03-04T16:15:08Z
- Modified
- 2026-10-20T14:06:40Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "34" }, { "last_affected": "34" }, { "introduced": "35" }, { "last_affected": "35" } ], "source": "CPE_STRING" } ], "vendor_product": "fedoraproject:fedora" } ] }- References
-
- https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=28e24125541545483093819efae9bca603441951
- https://security.gentoo.org/glsa/202211-04
- https://www.postgresql.org/support/security/CVE-2021-23214/
- https://bugzilla.redhat.com/show_bug.cgi?id=2022666
- https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951
Affected packages
Git / github.com/postgres/postgres
Affected ranges
- Type
- GIT
- Repo
- https://github.com/postgres/postgres
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedLast AffectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "fixed": "9.6.24" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "range": [ { "introduced": "10.0" }, { "fixed": "10.19" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "range": [ { "introduced": "11.0" }, { "fixed": "11.14" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "range": [ { "introduced": "12.0" }, { "fixed": "12.9" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "range": [ { "introduced": "13.0" }, { "fixed": "13.5" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:postgresql:postgresql:14.0:*:*:*:*:*:*:*", "range": [ { "introduced": "14.0" }, { "last_affected": "14.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*", "range": [ { "introduced": "1.0" }, { "last_affected": "1.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "range": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*", "range": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*", "range": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ], "source": "CPE_STRING" }, { "range": [ { "fixed": "28e24125541545483093819efae9bca603441951" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
1.*
1.0
14.*
14.0
8.*
8.0
Other
PG95-1_01
REL6_1
REL6_1_1
REL6_2
REL6_2_1
REL6_3
REL6_3_2
REL6_5
REL7_0
REL7_1
REL7_1_BETA
REL7_1_BETA2
REL7_1_BETA3
REL7_2
REL7_2_BETA1
REL7_2_BETA2
REL7_2_BETA3
REL7_2_BETA4
REL7_2_BETA5
REL7_2_RC1
REL7_2_RC2
REL7_4_BETA1
REL7_4_BETA2
REL7_4_BETA3
REL7_4_BETA4
REL7_4_BETA5
REL7_4_RC1
REL8_0_0
REL8_0_0BETA1
REL8_0_0BETA2
REL8_0_0BETA3
REL8_0_0BETA4
REL8_0_0BETA5
REL8_0_0RC1
REL8_0_0RC2
REL8_0_0RC3
REL8_0_0RC4
REL8_0_0RC5
REL_10_0
REL_10_1
REL_10_10
REL_10_11
REL_10_12
REL_10_13
REL_10_14
REL_10_15
REL_10_16
REL_10_17
REL_10_18
REL_10_2
REL_10_3
REL_10_4
REL_10_5
REL_10_6
REL_10_7
REL_10_8
REL_10_9
REL_11_0
REL_11_1
REL_11_10
REL_11_11
REL_11_12
REL_11_13
REL_11_2
REL_11_3
REL_11_4
REL_11_5
REL_11_6
REL_11_7
REL_11_8
REL_11_9
REL_12_0
REL_12_1
REL_12_2
REL_12_3
REL_12_4
REL_12_5
REL_12_6
REL_12_7
REL_12_8
REL_13_0
REL_13_1
REL_13_2
REL_13_3
REL_13_4
Release_1_0_2
Release_2_0
Release_2_0_0
release-6-3
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23214.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "3811890202093623500044753568135729362",
"length": 6502
},
"id": "CVE-2021-23214-105eea8c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951",
"target": {
"file": "src/backend/postmaster/postmaster.c",
"function": "ProcessStartupPacket"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"144879391767781558536346253203041229101",
"143909272608489929547646403088676984859",
"165740410277193971204068639552488249268",
"152409958841785490640372562688845117313",
"234706297917235548429385406617794107408",
"11828208314494370596831837586978750783"
],
"threshold": 0.9
},
"id": "CVE-2021-23214-55642aa1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951",
"target": {
"file": "src/backend/postmaster/postmaster.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"257279594944366299067624145088475835974",
"188038483610294623053840785400255306180",
"333524964208957746553278214859551397688"
],
"threshold": 0.9
},
"id": "CVE-2021-23214-a802c310",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951",
"target": {
"file": "src/backend/libpq/pqcomm.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"269875017630651410691849837907292701499",
"126933090860823315927436042326420265172",
"127112800835486014972045098290616986500",
"168426345693575339352762023412076698426"
],
"threshold": 0.9
},
"id": "CVE-2021-23214-ee44c440",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951",
"target": {
"file": "src/include/libpq/libpq.h"
}
}
]
vanir_signatures_modified
"2026-10-20T14:06:40Z"