In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresqlUpgrade postgresql-testUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-contribUpgrade libpqUpgrade postgresql-pltclUpgrade libpq-develUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-test-rpm-macros | Apr 6, 2023 | Mar 3, 2023 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql15Upgrade postgresqlUpgrade postgresql12Upgrade postgresql14 | Aug 22, 2024 | Mar 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-private-develUpgrade postgresql-staticUpgrade libpq-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-llvmjitUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade libpq-debuginfoUpgrade postgresql-testUpgrade postgresql-plpython2Upgrade postgresql-plpython3Upgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade libpqUpgrade postgresql-pltcl | Sep 28, 2023 | Mar 3, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-plperl-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-serverUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-upgrade-develUpgrade postgresql15-llvmjitUpgrade postgresql15-plperlUpgrade postgresql15-contribUpgrade postgresql15-pltclUpgrade postgresql15-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-testUpgrade postgresql15-private-develUpgrade postgresql15-server-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15Upgrade postgresql15-upgradeUpgrade postgresql15-server-devel | Feb 17, 2025 | Feb 9, 2023 |
| Centos_linux | — | Upgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperlUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade libpq-debuginfoUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-testUpgrade postgresql-debuginfoUpgrade pg_repackUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade libpq-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-contribUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade libpq-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contrib-debuginfoUpgrade libpq-devel-debuginfoUpgrade libpqUpgrade postgresql-docs | Apr 6, 2023 | Mar 3, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Feb 13, 2023 | Feb 13, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade postgresql15-clientUpgrade postgresql12-clientUpgrade postgresql14-clientUpgrade postgresql13-client | Feb 10, 2023 | Feb 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade libpqUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade pg_repackUpgrade libpq-develUpgrade postgresql-staticUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade postgresql-contrib | Apr 5, 2023 | Feb 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.7Upgrade to PostgreSQL version 15.2 | Mar 3, 2023 | Mar 3, 2023 |
| Redhat_linux | — | Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade libpqUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-serverUpgrade pg_repack-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-contribUpgrade libpq-devel-debuginfoUpgrade libpq-debugsourceUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade libpq-develNo solution existsUpgrade postgresql-server-debuginfoUpgrade postgresql-private-develUpgrade pg_repackUpgrade libpq-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repack-debugsource | Apr 6, 2023 | Mar 3, 2023 |
| Rocky_linux | — | Upgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade pg_repackUpgrade postgresql-plperlUpgrade libpq-develUpgrade postgresql-contribUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade libpqUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfo | Mar 5, 2024 | Mar 3, 2023 |
| Suse | — | Upgrade postgresql15-plperlUpgrade postgresql15-server-develUpgrade postgresql15-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql14-server-develUpgrade postgresql12-develUpgrade postgresql13-plperlUpgrade postgresql12-plpythonUpgrade postgresql12-server-develUpgrade postgresql13-llvmjit-develUpgrade postgresql13-server-develUpgrade postgresql14-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql14Upgrade postgresql12-docsUpgrade postgresql13Upgrade postgresql13-pltclUpgrade postgresql14-develUpgrade postgresql13-contribUpgrade postgresql12-pltclUpgrade postgresql15-llvmjitUpgrade libecpg6Upgrade postgresql15Upgrade postgresql13-docsUpgrade postgresql12-contribUpgrade postgresql15-develUpgrade postgresql13-serverUpgrade postgresql12-serverUpgrade libpq5Upgrade postgresql14-pltclUpgrade postgresql14-llvmjitUpgrade postgresql13-llvmjitUpgrade postgresql15-testUpgrade postgresql13-develUpgrade postgresql14-docsUpgrade postgresql15-serverUpgrade postgresql15-docsUpgrade postgresql14-plpythonUpgrade postgresql13-plpythonUpgrade postgresql15-contribUpgrade postgresql12-llvmjitUpgrade postgresql14-serverUpgrade postgresql15-pltclUpgrade postgresql15-plpythonUpgrade postgresql14-testUpgrade postgresql12-testUpgrade libecpg6-32bitUpgrade postgresql13-testUpgrade postgresql12-llvmjit-develUpgrade postgresql14-plperlUpgrade postgresql12Upgrade postgresql12-plperl | Feb 14, 2023 | Feb 14, 2023 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-client-12Upgrade postgresql-client-14 | Mar 22, 2023 | Mar 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub