schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade pgauditUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-test | Jun 27, 2023 | Jun 9, 2023 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresqlUpgrade postgresql15Upgrade postgresql12 | Mar 26, 2024 | Jun 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-test-rpm-macrosUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgresql-libsUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-test | Sep 28, 2023 | Jun 9, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | May 13, 2025 | Jun 8, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-testUpgrade postgresql15-server-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15Upgrade postgresql15-test-rpm-macrosUpgrade postgresql15-server-develUpgrade postgresql15-test-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-staticUpgrade postgresql15-serverUpgrade postgresql15-upgrade-develUpgrade postgresql15-private-develUpgrade postgresql15-docsUpgrade postgresql15-plperlUpgrade postgresql15-private-libsUpgrade postgresql15-plpython3Upgrade postgresql15-llvmjitUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-pltcl | Feb 17, 2025 | May 11, 2023 |
| Centos_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade pgaudit-debuginfoUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pg_repackUpgrade pg_repack-debuginfoUpgrade pg_repack-debugsourceUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-private-develUpgrade postgresql-server-debuginfoUpgrade postgresql-private-libsUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-docs | Jun 22, 2023 | Jun 9, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | May 15, 2023 | May 15, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | May 11, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-devel | Jan 10, 2024 | Jun 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-private-libsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-contribUpgrade pgaudit | Jun 22, 2023 | May 11, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.3Upgrade to PostgreSQL version 14.8 | Jun 9, 2023 | Jun 9, 2023 |
| Redhat_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade pgauditUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade pg_repack-debugsourceUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-private-develNo solution existsUpgrade pg_repack-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-testUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-debugsourceUpgrade postgresql-plpython3 | Jun 22, 2023 | Jun 9, 2023 |
| Rocky_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plperl-debuginfoUpgrade postgresql-private-develUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libs | Mar 5, 2024 | Jun 9, 2023 |
| Suse | — | Upgrade postgresql12-develUpgrade postgresql12-pltclUpgrade postgresql13-contribUpgrade postgresql12-plperlUpgrade postgresql12-llvmjit-develUpgrade postgresql15-plperlUpgrade postgresql15-contribUpgrade postgresql15-testUpgrade postgresql14-docsUpgrade postgresql15-serverUpgrade postgresql12-server-develUpgrade libpq5Upgrade postgresql14-llvmjit-develUpgrade postgresql12-plpythonUpgrade postgresql13-pltclUpgrade postgresql14-server-develUpgrade postgresql15-server-develUpgrade postgresql15-pltclUpgrade postgresql14-testUpgrade postgresql12-testUpgrade postgresql15-docsUpgrade postgresql12Upgrade postgresql13-server-develUpgrade postgresql12-llvmjitUpgrade postgresql14-pltclUpgrade postgresql14-serverUpgrade postgresql15-develUpgrade postgresql13-llvmjit-develUpgrade libecpg6Upgrade postgresql15Upgrade postgresql14-plpythonUpgrade postgresql13-serverUpgrade postgresql15-llvmjitUpgrade postgresql13Upgrade postgresql13-plperlUpgrade postgresql13-develUpgrade postgresql14Upgrade libpq5-32bitUpgrade postgresql13-testUpgrade postgresql14-plperlUpgrade postgresql14-develUpgrade postgresql13-plpythonUpgrade postgresql12-serverUpgrade libecpg6-32bitUpgrade postgresql15-plpythonUpgrade postgresql15-llvmjit-develUpgrade postgresql12-docsUpgrade postgresql14-contribUpgrade postgresql14-llvmjitUpgrade postgresql13-llvmjitUpgrade postgresql13-docsUpgrade postgresql12-contrib | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade postgresql-client-15Upgrade postgresql-12Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-10Upgrade postgresql-client-10Upgrade postgresql-15Upgrade postgresql-client-14Upgrade postgresql-14Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-client-12 | May 25, 2023 | May 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub