Vulnerabilities > CVE-2021-3677

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

postgresql

redhat

fedoraproject

NVD

Published: 2022-03-02

Updated: 2024-11-21

Summary

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.

Vulnerable Configurations

Part	Description	Count
Application	Postgresql Postgresql Postgresql 13.0 Postgresql Postgresql 13.1 Postgresql Postgresql 13.2 Postgresql Postgresql 13.3 Postgresql Postgresql 12.0 Postgresql Postgresql 12.1 Postgresql Postgresql 12.2 Postgresql Postgresql 12.3 Postgresql Postgresql 12.4 Postgresql Postgresql 12.5 Postgresql Postgresql 12.6 Postgresql Postgresql 12.7 Postgresql Postgresql 11.0 Postgresql Postgresql 11.1 Postgresql Postgresql 11.2 Postgresql Postgresql 11.3 Postgresql Postgresql 11.4 Postgresql Postgresql 11.5 Postgresql Postgresql 11.6 Postgresql Postgresql 11.7 Postgresql Postgresql 11.8 Postgresql Postgresql 11.9 Postgresql Postgresql 11.10 Postgresql Postgresql 11.11 Postgresql Postgresql 11.12	25
Application	Redhat Redhat Virtualization 4.0 Redhat Software Collections 1.0	2
OS	Redhat Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux FOR Power Little Endian 8.0 Redhat Enterprise Linux FOR IBM Z Systems 8.0	4
OS	Fedoraproject Fedoraproject Fedora 34	1

Vulnerabilities > CVE-2021-3677 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2021-3677"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2021-3677