USN-5645-1

Dashboard / Vulnerabilities / USN-5645-1

USN-5645-1

Summary: postgresql-9.5 vulnerabilities

Details: Jacob Champion discovered that PostgreSQL incorrectly handled SSL certificate verification and encryption. A remote attacker could possibly use this issue to inject arbitrary SQL queries when a connection is first established. (CVE-2021-23214) Tom Lane discovered that PostgreSQL incorrect handled certain array subscripting calculations. An authenticated attacker could possibly use this issue to overwrite server memory and escalate privileges. (CVE-2021-32027)

References: https://ubuntu.com/security/notices/USN-5645-1, https://ubuntu.com/security/CVE-2021-23214, https://ubuntu.com/security/CVE-2021-32027