CVE-2021-3393: Medium severity postgresql common vulnerability
A user having some UPDATE privilege on a partitioned table but lacking the SELECT privilege on some column may nonetheless be able to acquire denied-column values from an error message. This is similar to CVE-2014-8161, but the conditions for exploitation are more rare.
The PostgreSQL project thanks Heikki Linnakangas for reporting this problem.
Other sources
An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
— MITRE
PostgreSQL could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw in the error messages. By sending a specially-crafted query, an attacker could exploit this vulnerability to obtain sensitive information from a column they have UPDATE permission but not SELECT permission to, and use this information to launch further attacks against the affected system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-3393?
CVE-2021-3393 is an information leak vulnerability in PostgreSQL versions before 13.2, before 12.6, and before 11.11.
How can a remote authenticated attacker exploit CVE-2021-3393?
A remote authenticated attacker can exploit CVE-2021-3393 by crafting queries that may disclose values from a specific column in error messages.
What is the severity of CVE-2021-3393?
CVE-2021-3393 has a severity rating of 4.3, which is considered medium.
Which versions of PostgreSQL are affected by CVE-2021-3393?
Versions before 13.2, before 12.6, and before 11.11 of PostgreSQL are affected by CVE-2021-3393.
Where can I find more information about CVE-2021-3393?
You can find more information about CVE-2021-3393 at the following references: [Reference 1](https://access.redhat.com/security/cve/CVE-2014-8161), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi?id=1927868), [Reference 3](https://bugzilla.redhat.com/show_bug.cgi?id=1927867).