CVE-2021-23214

Published: Mar 4, 2022Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.

Affected (12)

Products: Postgresql: Postgresql · Fedoraproject: Fedora · Redhat: Enterprise Linux, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Power Little Endian, Software Collections

1 product

1 product

4 products

Enterprise Linux

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Power Little Endian

Software Collections

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Before 9.6.24
Postgresql Postgresql	From 10.0 to 10.19
Postgresql Postgresql	From 11.0 to 11.14
Postgresql Postgresql	From 12.0 to 12.9
Postgresql Postgresql	From 13.0 to 13.5
Postgresql Postgresql	Version 14.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux For Ibm Z Systems	Version 8.0
Redhat Enterprise Linux For Power Little Endian	Version 8.0
Redhat Software Collections	Version 1.0

Related CWEs

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (10)

https://bugzilla.redhat.com/show_bug.cgi?id=2022666

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=28e24125541545483093819efae9bca603441951

Source: secalert@redhat.com

https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951

Source: secalert@redhat.com

PatchThird Party Advisory

https://security.gentoo.org/glsa/202211-04

Source: secalert@redhat.com

Third Party Advisory

https://www.postgresql.org/support/security/CVE-2021-23214/

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2022666

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=28e24125541545483093819efae9bca603441951

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://security.gentoo.org/glsa/202211-04

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.postgresql.org/support/security/CVE-2021-23214/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.