Man-in-the-Middle (MitM) attack in PostgreSQL - CVE-2024-10977

Vulnerability identifier: #VU100512

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-10977

CWE-ID: CWE-300

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to spoof error messages from the database.

The vulnerability exists due to an error in libpq, which allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application. A remote attacker can perform a man-in-the-middle attack to send a long error message that a human or screen-scraper user of psql mistakes for valid query results.

PostgreSQL
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 12 SP5
Debian Linux
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Desktop 15 SP4
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Galera for Ericsson 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Server 12 SP5 LTSS
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
Server Applications Module
SUSE Package Hub 15
Basesystem Module
Legacy Module
openSUSE Leap
Ubuntu
openEuler
IBM Security QRadar Network Threat Analytics
OpenManage Network Integration (OMNI)
Dell EMC VxRail Appliance
RSA Authentication Manager
IBM Business Automation Workflow
postgresql-9.5 (Ubuntu package)
postgresql-client-9.5 (Ubuntu package)
postgresql-client-12 (Ubuntu package)
postgresql-12 (Ubuntu package)
postgresql12-debuginfo
postgresql12-debugsource
postgresql12-pltcl
postgresql12-pltcl-debuginfo
postgresql12-plperl
postgresql12-contrib-debuginfo
postgresql12-plpython-debuginfo
postgresql12-server
postgresql12
postgresql12-plpython
postgresql12-contrib
postgresql12-server-debuginfo
postgresql12-docs
postgresql12-plperl-debuginfo
postgresql12-devel
postgresql12-server-devel-debuginfo
postgresql12-llvmjit-debuginfo
postgresql12-server-devel
postgresql12-test
postgresql12-llvmjit
postgresql12-llvmjit-devel
postgresql12-devel-debuginfo
libpq
libpq-debuginfo
libpq-debugsource
libpq-devel
postgresql
postgresql-pltcl
postgresql-test-rpm-macros
postgresql-contrib
postgresql-debuginfo
postgresql-debugsource
postgresql-docs
postgresql-llvmjit
postgresql-plperl
postgresql-plpython3
postgresql-test
postgresql-private-devel
postgresql-private-libs
postgresql-server
postgresql-server-devel
postgresql-static
postgresql13-pltcl
postgresql13-docs
postgresql13-plpython-debuginfo
postgresql13
postgresql13-debuginfo
postgresql13-contrib
postgresql13-plperl-debuginfo
postgresql13-debugsource
postgresql13-server-debuginfo
postgresql13-plperl
postgresql13-plpython
postgresql13-contrib-debuginfo
postgresql13-server
postgresql13-pltcl-debuginfo
postgresql13-llvmjit
postgresql13-llvmjit-devel
postgresql13-llvmjit-debuginfo
postgresql13-test
postgresql13-devel
postgresql13-devel-debuginfo
postgresql13-server-devel-debuginfo
postgresql13-server-devel
postgresql-13-private-devel
postgresql-13-docs
postgresql-13-llvmjit
postgresql-13-plperl
postgresql-13-plpython3
postgresql-13
postgresql-13-contrib
postgresql-13-debuginfo
postgresql-13-pltcl
postgresql-13-private-libs
postgresql-13-server
postgresql-13-server-devel
postgresql-13-static
postgresql-13-test
postgresql-13-test-rpm-macros
postgresql-13-debugsource
postgresql-14 (Ubuntu package)
postgresql-client-14 (Ubuntu package)
postgresql14-pltcl
postgresql14-server-debuginfo
postgresql14-plpython
postgresql14-plperl-debuginfo
postgresql14-pltcl-debuginfo
postgresql14-contrib-debuginfo
postgresql14-plpython-debuginfo
postgresql14-contrib
postgresql14-plperl
postgresql14-server
postgresql14-docs
postgresql14-debugsource
postgresql14
postgresql14-debuginfo
postgresql14-devel-debuginfo
postgresql14-test
postgresql14-server-devel-debuginfo
postgresql14-llvmjit-devel
postgresql14-server-devel
postgresql14-llvmjit
postgresql14-devel
postgresql14-llvmjit-debuginfo
postgresql-15 (Debian package)
postgresql15-plpython
postgresql15-debuginfo
postgresql15-server
postgresql15-pltcl
postgresql15-contrib
postgresql15-plperl
postgresql15-plperl-debuginfo
postgresql15
postgresql15-plpython-debuginfo
postgresql15-server-debuginfo
postgresql15-contrib-debuginfo
postgresql15-debugsource
postgresql15-pltcl-debuginfo
postgresql15-docs
postgresql15-server-devel
postgresql15-devel
postgresql15-devel-debuginfo
postgresql15-test
postgresql15-llvmjit-debuginfo
postgresql15-llvmjit-devel
postgresql15-server-devel-debuginfo
postgresql15-llvmjit
postgresql-16 (Ubuntu package)
postgresql-client-16 (Ubuntu package)
postgresql16-plperl-debuginfo
postgresql16-docs
postgresql16-contrib
postgresql16-plperl
postgresql16-contrib-debuginfo
postgresql16-debuginfo
postgresql16
postgresql16-plpython
postgresql16-debugsource
postgresql16-pltcl
postgresql16-pltcl-debuginfo
postgresql16-server
postgresql16-plpython-debuginfo
postgresql16-server-debuginfo
postgresql16-server-devel
postgresql16-devel-debuginfo
postgresql16-server-devel-debuginfo
postgresql16-devel
postgresql16-llvmjit
postgresql16-llvmjit-debuginfo
postgresql16-test
postgresql16-llvmjit-devel
libpq5-debuginfo
libecpg6-debuginfo-32bit
libecpg6
libpq5-debuginfo-32bit
libecpg6-32bit
libecpg6-debuginfo
libpq5-32bit
libpq5
postgresql17-llvmjit-devel
postgresql17-llvmjit
postgresql17-server-devel
postgresql17-pltcl-debuginfo
postgresql17-test
postgresql17-debugsource
postgresql17-llvmjit-debuginfo
postgresql17-devel-debuginfo
postgresql17-contrib
postgresql17-docs
postgresql17-plperl-debuginfo
libecpg6-32bit-debuginfo
libpq5-32bit-debuginfo
postgresql17-debuginfo
postgresql17-plpython
postgresql17-contrib-debuginfo
postgresql17-server-devel-debuginfo
postgresql17-server-debuginfo
postgresql17-pltcl
postgresql17-devel
postgresql17-plpython-debuginfo
postgresql17-server
postgresql17-plperl
postgresql17
postgresql17-devel-mini-debuginfo
postgresql17-devel-mini
postgresql17-mini-debugsource
libecpg6-64bit
libpq5-64bit-debuginfo
libecpg6-64bit-debuginfo
libpq5-64bit
postgresql-plpython
postgresql-devel
postgresql-llvmjit-devel
Juniper Secure Analytics (JSA)
Cloud Tiering Appliance

Install updates from vendor's website.

PostgreSQL - addressed in versions 12.21, 13.17, 14.14, 15.9, 16.5, 17.1
IBM Security QRadar Network Threat Analytics - update to 1.4.3
Dell EMC VxRail Appliance - addressed in versions 7.0.533, 8.320, 8.321
RSA Authentication Manager - update to 8.7 SP2 Patch 6
IBM Business Automation Workflow - addressed in versions 24.0.0-IF007, 24.0.1-IF005, 25.0.0-IF002
postgresql-9.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
postgresql-client-9.5 (Ubuntu package) - update to Ubuntu Pro
OpenManage Network Integration (OMNI) - update to 3.7
Juniper Secure Analytics (JSA) - update to 7.5.0 UP11 IF03
postgresql-client-12 (Ubuntu package) - update to 12.22-0ubuntu0.20.04.1
postgresql-12 (Ubuntu package) - update to 12.22-0ubuntu0.20.04.1
postgresql12-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-debugsource - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-pltcl - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-pltcl-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-plperl - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-contrib-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-plpython-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-server - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12 - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-plpython - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-contrib - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-server-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-docs - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-plperl-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-devel - update to 12.22-150200.8.66.1
postgresql12-server-devel-debuginfo - update to 12.22-150200.8.66.1
postgresql12-llvmjit-debuginfo - update to 12.22-150200.8.66.1
postgresql12-server-devel - update to 12.22-150200.8.66.1
postgresql12-test - update to 12.22-150200.8.66.1
postgresql12-llvmjit - update to 12.22-150200.8.66.1
postgresql12-llvmjit-devel - update to 12.22-150200.8.66.1
postgresql12-devel-debuginfo - update to 12.22-150200.8.66.1
Cloud Tiering Appliance - update to 13.2.0.2.33
libpq - addressed in versions 13.17-1, 15.9-1
libpq-debuginfo - addressed in versions 13.17-1, 15.9-1
libpq-debugsource - addressed in versions 13.17-1, 15.9-1
libpq-devel - addressed in versions 13.17-1, 15.9-1
postgresql - addressed in versions 13.17-1, 15.9-1
postgresql-pltcl - addressed in versions 13.17-1, 15.9-1
postgresql-test-rpm-macros - addressed in versions 13.17-1, 15.9-1
postgresql-contrib - addressed in versions 13.17-1, 15.9-1
postgresql-debuginfo - addressed in versions 13.17-1, 15.9-1
postgresql-debugsource - addressed in versions 13.17-1, 15.9-1
postgresql-docs - addressed in versions 13.17-1, 15.9-1
postgresql-llvmjit - addressed in versions 13.17-1, 15.9-1
postgresql-plperl - addressed in versions 13.17-1, 15.9-1
postgresql-plpython3 - addressed in versions 13.17-1, 15.9-1
postgresql-test - addressed in versions 13.17-1, 15.9-1
postgresql-private-devel - addressed in versions 13.17-1, 15.9-1
postgresql-private-libs - addressed in versions 13.17-1, 15.9-1
postgresql-server - addressed in versions 13.17-1, 15.9-1
postgresql-server-devel - addressed in versions 13.17-1, 15.9-1
postgresql-static - addressed in versions 13.17-1, 15.9-1
postgresql13-pltcl - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-docs - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-plpython-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13 - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-contrib - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-plperl-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-debugsource - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-server-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-plperl - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-plpython - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-contrib-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-server - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-pltcl-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-llvmjit - update to 13.18-150200.5.64.1
postgresql13-llvmjit-devel - update to 13.18-150200.5.64.1
postgresql13-llvmjit-debuginfo - update to 13.18-150200.5.64.1
postgresql13-test - update to 13.18-150200.5.64.1
postgresql13-devel - update to 13.18-150200.5.64.1
postgresql13-devel-debuginfo - update to 13.18-150200.5.64.1
postgresql13-server-devel-debuginfo - update to 13.18-150200.5.64.1
postgresql13-server-devel - update to 13.18-150200.5.64.1
postgresql-13-private-devel - update to 13.20-1
postgresql-13-docs - update to 13.20-1
postgresql-13-llvmjit - update to 13.20-1
postgresql-13-plperl - update to 13.20-1
postgresql-13-plpython3 - update to 13.20-1
postgresql-13 - update to 13.20-1
postgresql-13-contrib - update to 13.20-1
postgresql-13-debuginfo - update to 13.20-1
postgresql-13-pltcl - update to 13.20-1
postgresql-13-private-libs - update to 13.20-1
postgresql-13-server - update to 13.20-1
postgresql-13-server-devel - update to 13.20-1
postgresql-13-static - update to 13.20-1
postgresql-13-test - update to 13.20-1
postgresql-13-test-rpm-macros - update to 13.20-1
postgresql-13-debugsource - update to 13.20-1
postgresql-14 (Ubuntu package) - update to 14.15-0ubuntu0.22.04.1
postgresql-client-14 (Ubuntu package) - update to 14.15-0ubuntu0.22.04.1
postgresql14-pltcl - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-server-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-plpython - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-plperl-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-pltcl-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-contrib-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-plpython-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-contrib - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-plperl - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-server - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-docs - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-debugsource - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14 - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-devel-debuginfo - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-test - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-server-devel-debuginfo - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-llvmjit-devel - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-server-devel - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-llvmjit - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-devel - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-llvmjit-debuginfo - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql-15 (Debian package) - update to 15.9-0+deb12u1
postgresql15-plpython - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-server - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-pltcl - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-contrib - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-plperl - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-plperl-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15 - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-plpython-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-server-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-contrib-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-debugsource - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-pltcl-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-docs - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-server-devel - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-devel - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-devel-debuginfo - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-test - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-llvmjit-debuginfo - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-llvmjit-devel - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-server-devel-debuginfo - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-llvmjit - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql-16 (Ubuntu package) - addressed in versions 16.6-0ubuntu0.24.04.1, 16.6-0ubuntu0.24.10.1
postgresql-client-16 (Ubuntu package) - addressed in versions 16.6-0ubuntu0.24.04.1, 16.6-0ubuntu0.24.10.1
postgresql16-plperl-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-docs - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-contrib - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-plperl - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-contrib-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16 - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-plpython - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-debugsource - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-pltcl - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-pltcl-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-server - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-plpython-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-server-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-server-devel - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-devel-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-server-devel-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-devel - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-llvmjit - addressed in versions 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-llvmjit-debuginfo - addressed in versions 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-test - addressed in versions 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-llvmjit-devel - addressed in versions 16.6-150200.5.21.1, 16.6-150600.16.10.1
libpq5-debuginfo - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libecpg6-debuginfo-32bit - update to 17.2-3.5.1
libecpg6 - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5-debuginfo-32bit - update to 17.2-3.5.1
libecpg6-32bit - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libecpg6-debuginfo - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5-32bit - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5 - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-llvmjit-devel - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-llvmjit - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-server-devel - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-pltcl-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-test - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-debugsource - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-llvmjit-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-devel-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-contrib - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-docs - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-plperl-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
libecpg6-32bit-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5-32bit-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-plpython - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-contrib-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-server-devel-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-server-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-pltcl - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-devel - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-plpython-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-server - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-plperl - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17 - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-devel-mini-debuginfo - update to 17.2-150600.13.5.1
postgresql17-devel-mini - update to 17.2-150600.13.5.1
postgresql17-mini-debugsource - update to 17.2-150600.13.5.1
libecpg6-64bit - update to 17.2-150600.13.5.1
libpq5-64bit-debuginfo - update to 17.2-150600.13.5.1
libecpg6-64bit-debuginfo - update to 17.2-150600.13.5.1
libpq5-64bit - update to 17.2-150600.13.5.1
postgresql - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-plperl - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-pltcl - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-docs - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-plpython - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-contrib - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-server - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-server-devel - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-devel - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-llvmjit - addressed in versions 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-llvmjit-devel - addressed in versions 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-test - addressed in versions 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1

• https://www.postgresql.org/support/security/CVE-2024-10977/

• Multiple vulnerabilities in PostgreSQL
• Debian update for postgresql-15
• openEuler 22.03 LTS SP1 update for postgresql
• openEuler 22.03 LTS SP3 update for postgresql
• openEuler 22.03 LTS SP4 update for postgresql
• openEuler 24.03 LTS update for postgresql
• openEuler 22.03 LTS SP4 update for libpq
• openEuler 24.03 LTS update for libpq
• openEuler 22.03 LTS SP1 update for libpq
• openEuler 22.03 LTS SP3 update for libpq
• SUSE update for postgresql, postgresql16, postgresql17
• SUSE update for postgresql, postgresql16, postgresql17
• SUSE update for postgresql12
• SUSE update for postgresql15
• SUSE update for postgresql12
• SUSE update for postgresql14
• SUSE update for postgresql15
• SUSE update for postgresql13
• SUSE update for postgresql14
• Ubuntu update for postgresql-12
• SUSE update for postgresql14
• SUSE update for postgresql13
• SUSE update for postgresql15
• SUSE update for postgresql, postgresql16, postgresql17
• Gentoo update for PostgreSQL
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Ubuntu update for postgresql-9.5
• openEuler 20.03 LTS SP4 update for postgresql-13
• Multiple vulnerabilities in Dell VxRail Appliance
• Multiple vulnerabilities in Dell VxRail Appliance 7.x
• Dell VxRail Appliance 8.x update for third-party components
• RSA Authentication Manager update for third-party components
• Juniper Secure Analytics update for third-party components
• Dell Cloud Tiering Appliance/VE update for third-party components
• SUSE update for postgresql, postgresql16, postgresql17
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in IBM Network Threat Analytics