CVE-2021-32028

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-32028
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32028.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-32028
Aliases
Downstream
Related
Published
2021-10-11T17:15:07Z
Modified
2025-10-10T03:18:06.418984Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.

References

Affected packages

Git / git.postgresql.org/git/postgresql.git

Affected ranges

Type
GIT
Repo
https://git.postgresql.org/git/postgresql.git
Events
Introduced
a721a1ba9cf6c86cb52f1bf325d5a27b64e870d6
Fixed
836dda6f1b31c5f7c70ebf52537364ffc3eff577

Affected versions

Other

REL9_6_0
REL9_6_1
REL9_6_10
REL9_6_11
REL9_6_12
REL9_6_13
REL9_6_14
REL9_6_15
REL9_6_16
REL9_6_17
REL9_6_18
REL9_6_19
REL9_6_2
REL9_6_20
REL9_6_21
REL9_6_3
REL9_6_4
REL9_6_5
REL9_6_6
REL9_6_7
REL9_6_8
REL9_6_9