| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | ≥ 12.0, < 12.14≥ 13.0, < 13.10≥ 14.0, < 14.7≥ 15.0, < 15.2 | 12.1413.1014.715.2 |
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free