CVE-2021-32028 - log back

CVE-2021-32028 edited at 13 May 2021 15:24:31
- Unknown
+ Medium
- Unknown
+ Remote
- Unknown
+ Information disclosure
+ A security issue was found in PostgreSQL before version 13.3. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an attacker can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can create prerequisite objects and complete this attack at will. A user lacking the CREATE and TEMPORARY privileges on all databases and the CREATE privilege on all schemas cannot use this attack at will.
CVE-2021-32028 created at 13 May 2021 15:20:50