UBUNTU-CVE-2021-32027

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2021-32027

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-32027.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-32027

Related

Published

2021-05-14T00:00:00Z

Modified

2021-05-14T00:00:00Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

References

Affected packages

Ubuntu:Pro:14.04:LTS / postgresql-9.3

Package

Name: postgresql-9.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.3.1-1

9.3.2-1

9.3.2-1ubuntu1

9.3.2-1ubuntu2

9.3.3-1

9.3.3-1bzr1

9.3.3-1bzr2

9.3.4-1

9.3.5-0ubuntu0.14.04.1

9.3.6-0ubuntu0.14.04

9.3.7-0ubuntu0.14.04

9.3.8-0ubuntu0.4.04

9.3.9-0ubuntu0.14.04

9.3.10-0ubuntu0.14.04

9.3.11-0ubuntu0.14.04

9.3.12-0ubuntu0.14.04

9.3.13-0ubuntu0.14.04

9.3.14-0ubuntu0.14.04

9.3.15-0ubuntu0.14.04

9.3.16-0ubuntu0.14.04

9.3.17-0ubuntu0.14.04

9.3.18-0ubuntu0.14.04.1

9.3.19-0ubuntu0.14.04

9.3.20-0ubuntu0.14.04

9.3.21-0ubuntu0.14.04

9.3.22-0ubuntu0.14.04

9.3.23-0ubuntu0.14.04

9.3.24-0ubuntu0.14.04

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / postgresql-9.5

Package

Name: postgresql-9.5
Purl: pkg:deb/ubuntu/postgresql-9.5@9.5.25-0ubuntu0.16.04.1+esm1?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.5.25-0ubuntu0.16.04.1+esm1

Affected versions

9.*

9.5.0-1

9.5.0-2

9.5.0-3

9.5.1-1

9.5.2-1

9.5.3-0ubuntu0.16.04

9.5.4-0ubuntu0.16.04

9.5.5-0ubuntu0.16.04

9.5.6-0ubuntu0.16.04

9.5.7-0ubuntu0.16.04

9.5.8-0ubuntu0.16.04.1

9.5.9-0ubuntu0.16.04

9.5.10-0ubuntu0.16.04

9.5.11-0ubuntu0.16.04

9.5.12-0ubuntu0.16.04

9.5.13-0ubuntu0.16.04

9.5.14-0ubuntu0.16.04

9.5.16-0ubuntu0.16.04.1

9.5.17-0ubuntu0.16.04.1

9.5.18-0ubuntu0.16.04.1

9.5.19-0ubuntu0.16.04.1

9.5.21-0ubuntu0.16.04.1

9.5.23-0ubuntu0.16.04.1

9.5.24-0ubuntu0.16.04.1

9.5.25-0ubuntu0.16.04.1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libecpg6-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libecpg6": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-9.5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-doc-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libpq5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libpq5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-plpython3-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libpq-dev": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libecpg-dev-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-plpython3-9.5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libpgtypes3-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libecpg-compat3": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-client-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-contrib-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-9.5-dbg": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-server-dev-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-server-dev-9.5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libecpg-dev": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-contrib-9.5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-plpython-9.5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-client-9.5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libpgtypes3": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-plperl-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-pltcl-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-plperl-9.5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-plpython-9.5": "9.5.25-0ubuntu0.16.04.1+esm1",
            "postgresql-pltcl-9.5-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libecpg-compat3-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1",
            "libpq-dev-dbgsym": "9.5.25-0ubuntu0.16.04.1+esm1"
        }
    ]
}

Ubuntu:18.04:LTS / postgresql-10

Package

Name: postgresql-10
Purl: pkg:deb/ubuntu/postgresql-10@10.17-0ubuntu0.18.04.1?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.17-0ubuntu0.18.04.1

Affected versions

10.*

10.1-1

10.1-2

10.2-1

10.3-1

10.4-0ubuntu0.18.04

10.5-0ubuntu0.18.04

10.6-0ubuntu0.18.04.1

10.7-0ubuntu0.18.04.1

10.8-0ubuntu0.18.04.1

10.9-0ubuntu0.18.04.1

10.10-0ubuntu0.18.04.1

10.12-0ubuntu0.18.04.1

10.14-0ubuntu0.18.04.1

10.15-0ubuntu0.18.04.1

10.16-0ubuntu0.18.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libpgtypes3-dbgsym": "10.17-0ubuntu0.18.04.1",
            "libecpg6": "10.17-0ubuntu0.18.04.1",
            "postgresql-client-10-dbgsym": "10.17-0ubuntu0.18.04.1",
            "postgresql-plpython3-10-dbgsym": "10.17-0ubuntu0.18.04.1",
            "postgresql-plperl-10-dbgsym": "10.17-0ubuntu0.18.04.1",
            "postgresql-server-dev-10-dbgsym": "10.17-0ubuntu0.18.04.1",
            "postgresql-pltcl-10-dbgsym": "10.17-0ubuntu0.18.04.1",
            "libecpg-dev": "10.17-0ubuntu0.18.04.1",
            "postgresql-plperl-10": "10.17-0ubuntu0.18.04.1",
            "libpq5": "10.17-0ubuntu0.18.04.1",
            "libpq5-dbgsym": "10.17-0ubuntu0.18.04.1",
            "postgresql-client-10": "10.17-0ubuntu0.18.04.1",
            "libpgtypes3": "10.17-0ubuntu0.18.04.1",
            "libpq-dev": "10.17-0ubuntu0.18.04.1",
            "libecpg-dev-dbgsym": "10.17-0ubuntu0.18.04.1",
            "postgresql-doc-10": "10.17-0ubuntu0.18.04.1",
            "postgresql-plpython-10": "10.17-0ubuntu0.18.04.1",
            "postgresql-10": "10.17-0ubuntu0.18.04.1",
            "postgresql-10-dbgsym": "10.17-0ubuntu0.18.04.1",
            "postgresql-plpython-10-dbgsym": "10.17-0ubuntu0.18.04.1",
            "libecpg-compat3": "10.17-0ubuntu0.18.04.1",
            "postgresql-server-dev-10": "10.17-0ubuntu0.18.04.1",
            "postgresql-pltcl-10": "10.17-0ubuntu0.18.04.1",
            "postgresql-plpython3-10": "10.17-0ubuntu0.18.04.1",
            "libecpg-compat3-dbgsym": "10.17-0ubuntu0.18.04.1",
            "libecpg6-dbgsym": "10.17-0ubuntu0.18.04.1"
        }
    ]
}

Ubuntu:20.04:LTS / postgresql-12

Package

Name: postgresql-12
Purl: pkg:deb/ubuntu/postgresql-12@12.7-0ubuntu0.20.04.1?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

12.7-0ubuntu0.20.04.1

Affected versions

12.*

12.0-1

12.1-1

12.1-2build1

12.2-1

12.2-1ubuntu2

12.2-4

12.4-0ubuntu0.20.04.1

12.5-0ubuntu0.20.04.1

12.6-0ubuntu0.20.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "postgresql-12-dbgsym": "12.7-0ubuntu0.20.04.1",
            "libecpg6": "12.7-0ubuntu0.20.04.1",
            "postgresql-doc-12": "12.7-0ubuntu0.20.04.1",
            "libecpg-dev": "12.7-0ubuntu0.20.04.1",
            "postgresql-client-12-dbgsym": "12.7-0ubuntu0.20.04.1",
            "postgresql-client-12": "12.7-0ubuntu0.20.04.1",
            "libpq5": "12.7-0ubuntu0.20.04.1",
            "libpq5-dbgsym": "12.7-0ubuntu0.20.04.1",
            "postgresql-server-dev-12": "12.7-0ubuntu0.20.04.1",
            "postgresql-pltcl-12-dbgsym": "12.7-0ubuntu0.20.04.1",
            "libpq-dev": "12.7-0ubuntu0.20.04.1",
            "libpgtypes3": "12.7-0ubuntu0.20.04.1",
            "libecpg-dev-dbgsym": "12.7-0ubuntu0.20.04.1",
            "postgresql-plpython3-12": "12.7-0ubuntu0.20.04.1",
            "postgresql-plpython3-12-dbgsym": "12.7-0ubuntu0.20.04.1",
            "postgresql-pltcl-12": "12.7-0ubuntu0.20.04.1",
            "libpgtypes3-dbgsym": "12.7-0ubuntu0.20.04.1",
            "libecpg-compat3": "12.7-0ubuntu0.20.04.1",
            "postgresql-plperl-12": "12.7-0ubuntu0.20.04.1",
            "postgresql-12": "12.7-0ubuntu0.20.04.1",
            "postgresql-plperl-12-dbgsym": "12.7-0ubuntu0.20.04.1",
            "libecpg-compat3-dbgsym": "12.7-0ubuntu0.20.04.1",
            "libecpg6-dbgsym": "12.7-0ubuntu0.20.04.1"
        }
    ]
}