CVE catalog

CVE-2020-14349

ALPINE-CVE-2020-14349

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.23% · Oct 25, 2026

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Alpinepostgresql3.1011.9-r0fixed
Alpinepostgresql3.1112.4-r0fixed
Alpinepostgresql3.1212.4-r0fixed
Alpinepostgresql3.1312.4-r0fixed
Alpinepostgresql3.1412.4-r0fixed
Alpinepostgresql3.911.9-r0fixed
Alpinepostgresql143.1512.4-r0fixed
Alpinepostgresql143.1612.4-r0fixed
Alpinepostgresql143.1712.4-r0fixed
Alpinepostgresql143.1812.4-r0fixed
Alpinepostgresql153.1712.4-r0fixed
Alpinepostgresql153.1812.4-r0fixed
Alpinepostgresql153.1912.4-r0fixed
Alpinepostgresql153.2012.4-r0fixed
Ubuntupostgresql-9.516.049.5.0-1vulnerable
Ubuntupostgresql-9.516.049.5.0-2vulnerable
Ubuntupostgresql-9.516.049.5.0-3vulnerable
Ubuntupostgresql-9.516.049.5.1-1vulnerable
Ubuntupostgresql-9.516.049.5.2-1vulnerable
Ubuntupostgresql-9.516.049.5.3-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.4-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.5-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.6-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.7-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.8-0ubuntu0.16.04.1vulnerable
Ubuntupostgresql-9.516.049.5.9-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.10-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.11-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.12-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.13-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.14-0ubuntu0.16.04vulnerable
Ubuntupostgresql-9.516.049.5.16-0ubuntu0.16.04.1vulnerable
Ubuntupostgresql-9.516.049.5.17-0ubuntu0.16.04.1vulnerable
Ubuntupostgresql-9.516.049.5.18-0ubuntu0.16.04.1vulnerable
Ubuntupostgresql-9.516.049.5.19-0ubuntu0.16.04.1vulnerable
Ubuntupostgresql-9.516.049.5.21-0ubuntu0.16.04.1vulnerable
Ubuntupostgresql-9.516.049.5.23-0ubuntu0.16.04.1fixed
Ubuntupostgresql-1018.0410.1-1vulnerable
Ubuntupostgresql-1018.0410.1-2vulnerable
Ubuntupostgresql-1018.0410.2-1vulnerable
Ubuntupostgresql-1018.0410.3-1vulnerable
Ubuntupostgresql-1018.0410.4-0ubuntu0.18.04vulnerable
Ubuntupostgresql-1018.0410.5-0ubuntu0.18.04vulnerable
Ubuntupostgresql-1018.0410.6-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.7-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.8-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.9-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.10-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.12-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.14-0ubuntu0.18.04.1fixed
Ubuntupostgresql-1220.0412.0-1vulnerable
Ubuntupostgresql-1220.0412.1-1vulnerable
Ubuntupostgresql-1220.0412.1-2build1vulnerable
Ubuntupostgresql-1220.0412.2-1vulnerable
Ubuntupostgresql-1220.0412.2-1ubuntu2vulnerable
Ubuntupostgresql-1220.0412.2-4vulnerable
Ubuntupostgresql-1220.0412.4-0ubuntu0.20.04.1fixed
Ubuntupostgresql-1018.0410.1-1vulnerable
Ubuntupostgresql-1018.0410.1-2vulnerable
Ubuntupostgresql-1018.0410.2-1vulnerable
Ubuntupostgresql-1018.0410.3-1vulnerable
Ubuntupostgresql-1018.0410.4-0ubuntu0.18.04vulnerable
Ubuntupostgresql-1018.0410.5-0ubuntu0.18.04vulnerable
Ubuntupostgresql-1018.0410.6-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.7-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.8-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.9-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.10-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.12-0ubuntu0.18.04.1vulnerable
Ubuntupostgresql-1018.0410.14-0ubuntu0.18.04.1fixed
Ubuntupostgresql-1220.0412.0-1vulnerable
Ubuntupostgresql-1220.0412.1-1vulnerable
Ubuntupostgresql-1220.0412.1-2build1vulnerable
Ubuntupostgresql-1220.0412.2-1vulnerable
Ubuntupostgresql-1220.0412.2-1ubuntu2vulnerable
Ubuntupostgresql-1220.0412.2-4vulnerable
Ubuntupostgresql-1220.0412.4-0ubuntu0.20.04.1fixed
Susepostgresql10linux enterprise high performance computing 15-espos10.14-4.25.1fixed
Susepostgresql10linux enterprise high performance computing 15-ltss10.14-4.25.1fixed
Susepostgresql10linux enterprise server 15-ltss10.14-4.25.1fixed
Susepostgresql10linux enterprise server for sap applications 1510.14-4.25.1fixed
Susepostgresql10hpe helion openstack 810.15-4.9.1fixed
Susepostgresql10openstack cloud 710.15-4.9.1fixed
Susepostgresql10openstack cloud 810.15-4.9.1fixed
Susepostgresql10openstack cloud 910.15-4.9.1fixed
Susepostgresql10openstack cloud crowbar 810.15-4.9.1fixed
Susepostgresql10openstack cloud crowbar 910.15-4.9.1fixed
Susepostgresql10linux enterprise server for sap applications 12 sp210.15-4.9.1fixed
Susepostgresql10linux enterprise server for sap applications 12 sp310.15-4.9.1fixed
Susepostgresql10linux enterprise server for sap applications 12 sp410.15-4.9.1fixed
Susepostgresql10linux enterprise software development kit 12 sp510.15-4.9.1fixed
Susepostgresql10linux enterprise server 12 sp2-ltss10.15-4.9.1fixed
Susepostgresql10linux enterprise server 12 sp2-bcl10.15-4.9.1fixed
Susepostgresql10linux enterprise server 12 sp3-ltss10.15-4.9.1fixed
Susepostgresql10linux enterprise server 12 sp3-bcl10.15-4.9.1fixed
Susepostgresql10linux enterprise server 12 sp4-ltss10.15-4.9.1fixed
Susepostgresql10linux enterprise server 12 sp510.15-4.9.1fixed
Susepostgresql10linux enterprise server for sap applications 12 sp510.15-4.9.1fixed
Susepostgresql10enterprise storage 510.15-4.9.1fixed
Opensusepostgresql12leap 15.212.4-lp152.3.7.1fixed
Susepostgresql10linux enterprise module for basesystem 15 sp110.14-8.19.1fixed
Susepostgresql10linux enterprise module for basesystem 15 sp210.14-8.19.1fixed
Susepostgresql10linux enterprise module for server applications 15 sp110.14-8.19.1fixed
Susepostgresql10linux enterprise module for server applications 15 sp210.14-8.19.1fixed
Opensusepostgresql12leap 15.112.4-lp151.6.1fixed
Opensusepostgresql10leap 15.110.14-lp151.2.18.1fixed
Susepostgresql12hpe helion openstack 812.5-3.9.3fixed
Susepostgresql12openstack cloud 712.5-3.9.3fixed
Susepostgresql12openstack cloud 812.5-3.9.3fixed
Susepostgresql12openstack cloud 912.5-3.9.3fixed
Susepostgresql12openstack cloud crowbar 812.5-3.9.3fixed
Susepostgresql12openstack cloud crowbar 912.5-3.9.3fixed
Susepostgresql12linux enterprise server for sap applications 12 sp212.5-3.9.3fixed
Susepostgresql12linux enterprise server for sap applications 12 sp312.5-3.9.3fixed
Susepostgresql12linux enterprise server for sap applications 12 sp412.5-3.9.3fixed
Susepostgresql12linux enterprise software development kit 12 sp512.5-3.9.3fixed
Susepostgresql12linux enterprise server 12 sp2-ltss12.5-3.9.3fixed
Susepostgresql12linux enterprise server 12 sp2-bcl12.5-3.9.3fixed
Susepostgresql12linux enterprise server 12 sp3-ltss12.5-3.9.3fixed
Susepostgresql12linux enterprise server 12 sp3-bcl12.5-3.9.3fixed
Susepostgresql12linux enterprise server 12 sp4-ltss12.5-3.9.3fixed
Susepostgresql12linux enterprise server 12 sp512.5-3.9.3fixed
Susepostgresql12linux enterprise server for sap applications 12 sp512.5-3.9.3fixed
Susepostgresql12enterprise storage 512.5-3.9.3fixed
Opensusepostgresqlleap 15.212.0.1-lp152.3.3.2fixed
Opensusepostgresql10leap 15.210.13-lp152.2.3.1fixed
Opensusepostgresql11leap 15.211.9-lp152.3.3.1fixed
Opensusepostgresql12leap 15.212.3-lp152.3.4.1fixed
Opensusepostgresql96leap 15.29.6.19-lp152.2.3.1fixed
Susepostgresql12linux enterprise module for basesystem 15 sp112.4-3.11.1fixed
Susepostgresql12linux enterprise module for server applications 15 sp112.4-3.11.1fixed
Susepostgresql12linux enterprise module for basesystem 15 sp212.4-8.6.1fixed
Susepostgresql12linux enterprise module for server applications 15 sp212.4-8.6.1fixed
Opensusepostgresql12tumbleweed12.8-1.3fixed
Opensusepostgresql10leap 15.210.14-lp152.2.6.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Alpinepostgresqlapk3.1011.9-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresqlapk3.1112.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresqlapk3.1212.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresqlapk3.1312.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresqlapk3.1412.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresqlapk3.911.9-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresql14apk3.1512.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresql14apk3.1612.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresql14apk3.1712.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresql14apk3.1812.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresql15apk3.1712.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresql15apk3.1812.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresql15apk3.1912.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Alpinepostgresql15apk3.2012.4-r0Not reportedALPINE-CVE-2020-14349Not reported
Ubuntupostgresql-9.5deb16.049.5.23-0ubuntu0.16.04.1Not reportedUSN-4472-1Not reported
Ubuntupostgresql-10deb18.0410.14-0ubuntu0.18.04.1Not reportedUSN-4472-1Not reported
Ubuntupostgresql-12deb20.0412.4-0ubuntu0.20.04.1Not reportedUSN-4472-1Not reported
Ubuntupostgresql-10deb18.0410.14-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-14349Not reported
Ubuntupostgresql-12deb20.0412.4-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-14349Not reported
Susepostgresql10rpmlinux enterprise high performance computing 15-espos10.14-4.25.1Not reportedSUSE-SU-2020:2264-1Not reported
Susepostgresql10rpmlinux enterprise high performance computing 15-ltss10.14-4.25.1Not reportedSUSE-SU-2020:2264-1Not reported
Susepostgresql10rpmlinux enterprise server 15-ltss10.14-4.25.1Not reportedSUSE-SU-2020:2264-1Not reported
Susepostgresql10rpmlinux enterprise server for sap applications 1510.14-4.25.1Not reportedSUSE-SU-2020:2264-1Not reported
Susepostgresql10rpmhpe helion openstack 810.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmopenstack cloud 710.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmopenstack cloud 810.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmopenstack cloud 910.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmopenstack cloud crowbar 810.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmopenstack cloud crowbar 910.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server for sap applications 12 sp210.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server for sap applications 12 sp310.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server for sap applications 12 sp410.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise software development kit 12 sp510.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server 12 sp2-ltss10.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server 12 sp2-bcl10.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server 12 sp3-ltss10.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server 12 sp3-bcl10.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server 12 sp4-ltss10.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server 12 sp510.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmlinux enterprise server for sap applications 12 sp510.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Susepostgresql10rpmenterprise storage 510.15-4.9.1Not reportedSUSE-SU-2020:3464-1Not reported
Opensusepostgresql12rpmleap 15.212.4-lp152.3.7.1Not reportedOPENSUSE-SU-2020:1244-1Not reported
Susepostgresql10rpmlinux enterprise module for basesystem 15 sp110.14-8.19.1Not reportedSUSE-SU-2020:2355-1Not reported
Susepostgresql10rpmlinux enterprise module for basesystem 15 sp210.14-8.19.1Not reportedSUSE-SU-2020:2355-1Not reported
Susepostgresql10rpmlinux enterprise module for server applications 15 sp110.14-8.19.1Not reportedSUSE-SU-2020:2355-1Not reported
Susepostgresql10rpmlinux enterprise module for server applications 15 sp210.14-8.19.1Not reportedSUSE-SU-2020:2355-1Not reported
Opensusepostgresql12rpmleap 15.112.4-lp151.6.1Not reportedOPENSUSE-SU-2020:1243-1Not reported
Opensusepostgresql10rpmleap 15.110.14-lp151.2.18.1Not reportedOPENSUSE-SU-2020:1312-1Not reported
Susepostgresql12rpmhpe helion openstack 812.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmopenstack cloud 712.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmopenstack cloud 812.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmopenstack cloud 912.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmopenstack cloud crowbar 812.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmopenstack cloud crowbar 912.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server for sap applications 12 sp212.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server for sap applications 12 sp312.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server for sap applications 12 sp412.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise software development kit 12 sp512.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server 12 sp2-ltss12.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server 12 sp2-bcl12.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server 12 sp3-ltss12.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server 12 sp3-bcl12.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server 12 sp4-ltss12.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server 12 sp512.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmlinux enterprise server for sap applications 12 sp512.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Susepostgresql12rpmenterprise storage 512.5-3.9.3Not reportedSUSE-SU-2020:3630-1Not reported
Opensusepostgresqlrpmleap 15.212.0.1-lp152.3.3.2Not reportedOPENSUSE-SU-2020:1228-1Not reported
Opensusepostgresql10rpmleap 15.210.13-lp152.2.3.1Not reportedOPENSUSE-SU-2020:1228-1Not reported
Opensusepostgresql11rpmleap 15.211.9-lp152.3.3.1Not reportedOPENSUSE-SU-2020:1228-1Not reported
Opensusepostgresql12rpmleap 15.212.3-lp152.3.4.1Not reportedOPENSUSE-SU-2020:1228-1Not reported
Opensusepostgresql96rpmleap 15.29.6.19-lp152.2.3.1Not reportedOPENSUSE-SU-2020:1228-1Not reported
Susepostgresql12rpmlinux enterprise module for basesystem 15 sp112.4-3.11.1Not reportedSUSE-SU-2020:2271-1Not reported
Susepostgresql12rpmlinux enterprise module for server applications 15 sp112.4-3.11.1Not reportedSUSE-SU-2020:2271-1Not reported
Susepostgresql12rpmlinux enterprise module for basesystem 15 sp212.4-8.6.1Not reportedSUSE-SU-2020:2265-1Not reported
Susepostgresql12rpmlinux enterprise module for server applications 15 sp212.4-8.6.1Not reportedSUSE-SU-2020:2265-1Not reported
Opensusepostgresql12rpmtumbleweed12.8-1.3Not reportedOPENSUSE-SU-2024:11186-1Not reported
Opensusepostgresql10rpmleap 15.210.14-lp152.2.6.2Not reportedOPENSUSE-SU-2020:1326-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References