A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade pg_repackUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-static | Nov 4, 2022 | Aug 18, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresql15Upgrade postgresqlUpgrade postgresql12 | Mar 26, 2024 | Aug 18, 2022 |
| Centos_linux | — | Upgrade postgresql-test-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade pgaudit-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade pg_repack-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfo | Oct 26, 2022 | Aug 18, 2022 |
| Debian | — | Upgrade postgresql-13 | Aug 17, 2022 | Aug 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Aug 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-testUpgrade postgresql | Dec 9, 2022 | Aug 18, 2022 |
| Oracle_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-plperl | Oct 27, 2022 | Aug 11, 2022 |
| Postgres | — | Upgrade to PostgreSQL version 14.5 | Aug 18, 2022 | Aug 18, 2022 |
| Redhat_linux | — | Upgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceNo solution existsUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade pgaudit-debugsourceUpgrade pgaudit | Oct 26, 2022 | Aug 18, 2022 |
| Rocky_linux | — | Upgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-serverUpgrade pgaudit-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade pg_repack-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfo | Mar 12, 2024 | Aug 18, 2022 |
| Suse | — | Upgrade postgresql13-plperlUpgrade postgresql14-plpythonUpgrade postgresql12-develUpgrade postgresql14-contribUpgrade postgresql-develUpgrade postgresql14-server-develUpgrade postgresql-contribUpgrade postgresql13-llvmjitUpgrade postgresql12-plperlUpgrade postgresql10-contribUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql10-docsUpgrade postgresql12-serverUpgrade postgresql-pltclUpgrade postgresql13-testUpgrade postgresql10-plperlUpgrade postgresql13-contribUpgrade postgresql13-docsUpgrade postgresql14-plperlUpgrade postgresql12-testUpgrade postgresql-plperlUpgrade postgresql14-develUpgrade postgresql12Upgrade libpq5-32bitUpgrade postgresql10-pltclUpgrade postgresql12-docsUpgrade postgresql12-llvmjit-develUpgrade postgresql10-develUpgrade postgresql13-llvmjit-develUpgrade postgresql13-server-develUpgrade libpq5Upgrade postgresql12-pltclUpgrade postgresql13-plpythonUpgrade postgresql14-docsUpgrade postgresql14-llvmjitUpgrade postgresql13Upgrade postgresql10-testUpgrade postgresql10Upgrade postgresql14-testUpgrade postgresqlUpgrade postgresql10-serverUpgrade libecpg6-32bitUpgrade postgresql13-pltclUpgrade postgresql14Upgrade postgresql12-server-develUpgrade postgresql-server-develUpgrade postgresql10-llvmjit-develUpgrade postgresql12-llvmjitUpgrade postgresql-serverUpgrade postgresql10-plpythonUpgrade postgresql12-contribUpgrade libecpg6Upgrade postgresql14-serverUpgrade postgresql14-pltclUpgrade postgresql13-serverUpgrade postgresql12-plpythonUpgrade postgresql14-llvmjit-develUpgrade postgresql13-devel | Oct 26, 2022 | Aug 18, 2022 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-10 | Aug 19, 2022 | Aug 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub