USN-5145-1: postgresql-10 Ubuntu
CVSS: UnknownPublished
Published 11-11-2021Last modified 27-04-2026
Vulnerability summary
USN-5145-1 is a vulnerability in postgresql-10 Ubuntu with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 11-11-2021PublishedVulnerability first disclosed.
- 27-04-2026Last modifiedVulnerability information updated.
Description
postgresql-10, postgresql-12, postgresql-13 vulnerabilities Jacob Champion discovered that PostgreSQL incorrectly handled SSL certificate verification and encryption. A remote attacker could possibly use this issue to inject arbitrary SQL queries when a connection is first established.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu2 products
- postgresql-10< 10.19-0ubuntu0.18.04.1
- postgresql-12< 12.9-0ubuntu0.20.04.1
1 vendor · 2 products