Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1913743 - https://sourceware.org/bugzilla/show_bug.cgi?id=26945 - https://security.netapp.com/advisory/ntap-20210528-0009/ - https://security.gentoo.org/glsa/202208-30
CVE ID: CVE-2021-20198 State: PUBLISHED Published: 2021-02-23T17:45:25 Last Updated: 2024-08-03T17:30:07.622Z Vendors: n/a Products: openshift/installer Problem Types: CWE-306 Description: A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this port during installation can make unauthenticated `/exec` requests to execute arbitrary commands within running containers. The highest threat from this vulnerability is to data confidentiality and integrity as we
nds within running containers. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1920764
CVE ID: CVE-2021-20199 State: PUBLISHED Published: 2021-02-02T18:12:26 Last Updated: 2024-08-03T17:30:07.575Z Vendors: n/a Products: podman Problem Types: CWE-346 Description: Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1919050 - https://github.com/containers/podman/issues/5138 - https://github.com/rootless-containers/rootlesskit/pull/2
d=1919050 - https://github.com/containers/podman/issues/5138 - https://github.com/rootless-containers/rootlesskit/pull/206 - https://github.com/containers/podman/pull/9052
CVE ID: CVE-2021-20200 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-20201 State: PUBLISHED Published: 2021-05-28T10:42:15 Last Updated: 2024-08-03T17:30:07.638Z Vendors: n/a Products: spice Problem Types: CWE-400 Description: A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1921846 - https://blog.qualys.com/product-tech/2011/10/31/tls-renegotiation-and-denial-of-service-attacks - https://security.gentoo.org/glsa/202208-10
CVE ID: CVE-2021-20202 State: PUBLISHED Published: 2021-05-12T14:40:00 Last Updated: 2024-08-03T17:30:07.447Z Vendors: n/a Products: keycloak Problem Types: CWE-377 Description: A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to the contents that keycloak stores in this directory. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1922128
CVE ID: CVE-2021-20203 State: PUBLISHED Published: 2021-02-25T19:09:46 Last Updated: 2024-08-03T17:30:07.577Z Vendors: n/a Products: qemu Problem Types: CWE-190 Description: An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1922441 - https://bugs.launchpad.net/qemu/+bug/1913873 - https://lists.debian.org/debian-lts-announce/2021/0
_bug.cgi?id=1922441 - https://bugs.launchpad.net/qemu/+bug/1913873 - https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-20204 State: PUBLISHED Published: 2021-05-06T14:50:52 Last Updated: 2024-10-17T18:02:57.013Z Vendors: n/a Products: getdata Problem Types: CWE-119 Description: A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity and availability of third-party software that uses libgetdata as a library. This vulnerability may lead to arbitrary code execution or privilege escalation depending on input/skills of attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=19563
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956348 - https://lists.debian.org/debian-lts-announce/2021/05/msg00015.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OE23HBLIVKVPOQ5MVADWPOCFMREVF4QZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43JTGEMYMCTHD3LHFD7ENBNSWCNBCYEY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GB7T7DW7XRPJOUE25ZE7GF244FPCHBWY/
CVE ID: CVE-2021-20205 State: PUBLISHED Published: 2021-03-10T16:21:58 Last Updated: 2024-08-03T17:30:07.693Z Vendors: n/a Products: Libjpeg-turbo Problem Types: Divide By Zero Description: Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1937385 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TM3AHZEYGYFEDL6AW5RLEAJNVRWEJDFL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMLEY
RLEAJNVRWEJDFL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMLEY6HLVZAGXIOGGPPUAMRJUA6LB3FD/
CVE ID: CVE-2021-20206 State: PUBLISHED Published: 2021-03-26T21:34:58 Last Updated: 2024-08-03T17:30:07.575Z Vendors: n/a Products: containernetworking-cni Problem Types: CWE-20 Description: An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as syst
ns/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1919391 - https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMCONTAINERNETWORKINGCNIPKGINVOKE-1070549
CVE ID: CVE-2021-20207 State: REJECTED Published: 2021-02-02T06:33:11 Last Updated: 2021-02-02T06:33:11 Description: No description available.
CVE ID: CVE-2021-20208 State: PUBLISHED Published: 2021-04-19T21:12:00 Last Updated: 2024-08-03T17:30:07.497Z Vendors: n/a Products: cifs-utils Problem Types: CWE-266 Description: A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1921116 - https://bugzilla.samba.org/show_bug.cgi?id=14651 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z
ow_bug.cgi?id=14651 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4BZSJXROEFHYATAAHHRR6P3HUSMPQB3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4HSDIWXXNQBUW5ZS37RQMLJ7THK5AS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66WJ3SVBHCSNQZAWSGLB6FBOCFU45FFG/
CVE ID: CVE-2021-20209 State: PUBLISHED Published: 2021-05-25T19:34:09 Last Updated: 2024-08-03T17:30:07.426Z Vendors: n/a Products: privoxy Problem Types: CWE-401 Description: A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/3.0.29/user-manual/whatsnew.html - https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=c62254a686 - https://bugzilla.redhat.com/show_bug.cgi?id=1928726 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20210 State: PUBLISHED Published: 2021-03-25T18:57:02 Last Updated: 2024-08-03T17:30:07.406Z Vendors: n/a Products: privoxy Problem Types: CWE-401 Description: A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/3.0.29/user-manual/whatsnew.html - https://bugzilla.redhat.com/show_bug.cgi?id=1928729 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20211 State: PUBLISHED Published: 2021-03-25T18:57:08 Last Updated: 2024-08-03T17:30:07.596Z Vendors: n/a Products: privoxy Problem Types: CWE-401 Description: A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/3.0.29/user-manual/whatsnew.html - https://bugzilla.redhat.com/show_bug.cgi?id=1928733 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20212 State: PUBLISHED Published: 2021-03-25T18:57:16 Last Updated: 2024-08-03T17:30:07.442Z Vendors: n/a Products: privoxy Problem Types: CWE-401 Description: A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error leading to a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/3.0.29/user-manual/whatsnew.html - https://bugzilla.redhat.com/show_bug.cgi?id=1928736 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20213 State: PUBLISHED Published: 2021-03-25T18:57:26 Last Updated: 2024-08-03T17:30:07.645Z Vendors: n/a Products: privoxy Problem Types: CWE-476 Description: A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/3.0.29/user-manual/whatsnew.html - https://bugzilla.redhat.com/show_bug.cgi?id=1928739 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20214 State: PUBLISHED Published: 2021-03-25T18:57:34 Last Updated: 2024-08-03T17:30:07.500Z Vendors: n/a Products: privoxy Problem Types: CWE-401 Description: A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/3.0.29/user-manual/whatsnew.html - https://bugzilla.redhat.com/show_bug.cgi?id=1928742 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20215 State: PUBLISHED Published: 2021-03-25T18:57:41 Last Updated: 2024-08-03T17:30:07.356Z Vendors: n/a Products: privoxy Problem Types: CWE-401 Description: A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/3.0.29/user-manual/whatsnew.html - https://bugzilla.redhat.com/show_bug.cgi?id=1928746 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20216 State: PUBLISHED Published: 2021-03-25T18:57:49 Last Updated: 2024-08-03T17:30:07.787Z Vendors: n/a Products: privoxy Problem Types: CWE-400 Description: A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1923256 - https://www.openwall.com/lists/oss-security/2021/01/31/2 - https://www.privoxy.org/3.0.31/user-manual/whatsnew.html - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20217 State: PUBLISHED Published: 2021-03-25T18:57:55 Last Updated: 2024-08-03T17:30:07.475Z Vendors: n/a Products: privoxy Problem Types: CWE-617 Description: A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1923252 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20218 State: PUBLISHED Published: 2021-03-16T21:00:32 Last Updated: 2024-08-03T17:30:07.581Z Vendors: n/a Products: fabric8-kubernetes-client Problem Types: CWE-22 Description: A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2 Additional Analyst Notes: - CVE Program Container: References: -
-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2 Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1923405 - https://github.com/fabric8io/kubernetes-client/issues/2715
CVE ID: CVE-2021-20219 State: PUBLISHED Published: 2021-03-23T16:34:00 Last Updated: 2024-08-03T17:30:07.576Z Vendors: n/a Products: kernel Problem Types: CWE-697 Description: A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop (due to a changing ldata->read_head, and a missing sanity check) and cause a threat to the system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1923738
CVE ID: CVE-2021-20220 State: PUBLISHED Published: 2021-02-23T17:21:44 Last Updated: 2024-08-03T17:30:07.487Z Vendors: n/a Products: undertow Problem Types: CWE-444 Description: A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - h
lnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1923133 - https://security.netapp.com/advisory/ntap-20220210-0013/
CVE ID: CVE-2021-20221 State: PUBLISHED Published: 2021-05-13T15:34:48 Last Updated: 2024-08-03T17:30:07.645Z Vendors: n/a Products: qemu Problem Types: CWE-125 Description: An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario. Additional Analyst Notes: - CVE Pro
r may use this flaw to crash the QEMU process on the host resulting in DoS scenario. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/02/05/1 - https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html - https://bugzilla.redhat.com/show_bug.cgi?id=1924601 - https://security.netapp.com/advisory/ntap-20210708-0005/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-20222 State: PUBLISHED Published: 2021-03-23T16:36:39 Last Updated: 2024-08-03T17:30:07.597Z Vendors: n/a Products: keycloak Problem Types: CWE-20 Description: A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1924606
CVE ID: CVE-2021-20223 State: REJECTED Published: N/A Last Updated: 2022-11-10T00:00:00 Description: No description available.
CVE ID: CVE-2021-20224 State: PUBLISHED Published: 2022-08-25T00:00:00 Last Updated: 2024-08-03T17:30:07.484Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/pull/3083 - https://github.com/ImageMagick/ImageMagick/commit/5af1dffa4b6
: - https://github.com/ImageMagick/ImageMagick/pull/3083 - https://github.com/ImageMagick/ImageMagick/commit/5af1dffa4b6ab984b5f13d1e91c95760d75f12a6 - https://github.com/ImageMagick/ImageMagick6/commit/553054c1cb1e4e05ec86237afef76a32cd7c464d - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2021-20225 State: PUBLISHED Published: 2021-03-03T16:44:26 Last Updated: 2024-08-03T17:30:07.623Z Vendors: n/a Products: grub2 Problem Types: CWE-787 Description: A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1924696 - https://lists.fedoraproject.org/archives/list/package-announce%40li
ttps://bugzilla.redhat.com/show_bug.cgi?id=1924696 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/ - https://security.gentoo.org/glsa/202104-05 - https://security.netapp.com/advisory/ntap-20220325-0001/
CVE ID: CVE-2021-20226 State: PUBLISHED Published: 2021-02-23T16:36:29 Last Updated: 2024-08-03T17:30:07.498Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existence of an object prior to performing operations on the object by not incrementing the file reference counter while in use. The highest threat from this vulnerability is to data integrity, confidentiality and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bu
ty, confidentiality and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1873476 - https://security.netapp.com/advisory/ntap-20210401-0001/
CVE ID: CVE-2021-20227 State: PUBLISHED Published: 2021-03-23T00:00:00 Last Updated: 2024-08-03T17:30:07.500Z Vendors: n/a Products: sqlite Problem Types: CWE-416 Description: A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1924886 - https://www.sqlite.org/releaselog/3_34_1.html - https://security.gentoo.org/g
zilla.redhat.com/show_bug.cgi?id=1924886 - https://www.sqlite.org/releaselog/3_34_1.html - https://security.gentoo.org/glsa/202103-04 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://security.netapp.com/advisory/ntap-20210423-0010/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.gentoo.org/glsa/202210-40
CVE ID: CVE-2021-20228 State: PUBLISHED Published: 2021-04-29T15:34:08 Last Updated: 2024-08-03T17:30:07.863Z Vendors: n/a Products: ansible Problem Types: CWE-200 Description: A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1925002 - https://github.com/ansible/ansible/pull/73487 - https://www.debian.org/security/20
.redhat.com/show_bug.cgi?id=1925002 - https://github.com/ansible/ansible/pull/73487 - https://www.debian.org/security/2021/dsa-4950
CVE ID: CVE-2021-20229 State: PUBLISHED Published: 2021-02-23T17:40:53 Last Updated: 2024-08-03T17:30:07.427Z Vendors: n/a Products: PostgreSQL Problem Types: CWE-863 Description: A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1925296 - https://security.netapp.com/advisory/ntap-20210326-0005/ - https://security.gentoo.org/glsa/202105-32