GCVE - cpe:2.3:a:postgresql:postgresql:14.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:14.0:*:*:*:*:*:*:*

part: a version: 14.0 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:16.920045
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:16.920046
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:16.920048
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:16.920049
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:16.920051
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:16.920052

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-43767`	vulnerable	2026-06-08 05:36:43.960207	Details available Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'trust' authentication with a 'clientcert' requirement or to use 'cert' authentication, a man-in-the-middle attacker can inject false responses to the client's first few queries. Despite the use of SSL certificate verification and encryption, Odyssey will pass these results to client as if they originated from valid server. This is similar to CVE-2021-23222 for PostgreSQL. Published: 2022-08-25T17:27:39.000Z Updated: 2024-08-04T04:03:08.608Z Open on db.gcve.eu Reference links https://www.postgresql.org/support/security/CVE-2021-23222/ https://github.com/yandex/odyssey/issues/377%2C	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-23222`	vulnerable	2026-06-08 05:30:02.528904	Details available A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption. Published: 2022-03-02T00:00:00.000Z Updated: 2024-08-03T19:05:54.487Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2022675 https://www.postgresql.org/support/security/CVE-2021-23222/ https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=d83cdfdca9d918bbbd6bb209139b94c954da7228 https://github.com/postgres/postgres/commit/160c0258802d10b0600d7671b1bbea55d8e17d45 https://security.gentoo.org/glsa/202211-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-23214`	vulnerable	2026-06-08 05:30:02.446322	Details available When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption. Published: 2022-03-04T00:00:00.000Z Updated: 2024-08-03T19:05:55.443Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2022666 https://www.postgresql.org/support/security/CVE-2021-23214/ https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=28e24125541545483093819efae9bca603441951 https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951 https://security.gentoo.org/glsa/202211-04	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.