A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-docs | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql12Upgrade postgresql14Upgrade postgresql15 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-llvmjitUpgrade postgresql-private-libsUpgrade postgresql-plpython2Upgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-server-devel | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-serverUpgrade postgresql15-pltclUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-contribUpgrade postgresql15-debugsourceUpgrade postgresql15-docsUpgrade postgresql15-plpython3Upgrade postgresql15-server-debuginfoUpgrade postgresql15-testUpgrade postgresql15-server-develUpgrade postgresql15Upgrade postgresql15-private-libsUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-staticUpgrade postgresql15-test-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-upgrade-debuginfo | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade pgaudit-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-upgradeUpgrade pg_repack-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade pg_repack-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-private-libs-debuginfoUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-private-develUpgrade postgresql-upgrade-debuginfo | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-contrib | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-private-libs | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 14.10 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoNo solution existsUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-contribUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfo | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-staticUpgrade pgaudit-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-contribUpgrade pg_repack | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql14-llvmjit-develUpgrade postgresql15-plperlUpgrade postgresql13-pltclUpgrade postgresql16-server-develUpgrade postgresql14-plpythonUpgrade postgresql12-plperlUpgrade postgresql15-docsUpgrade postgresql-server-develUpgrade postgresql16-pltclUpgrade postgresql15-develUpgrade postgresql12-server-develUpgrade postgresql-develUpgrade postgresql13-server-develUpgrade postgresql16-contribUpgrade postgresql16-plperlUpgrade postgresql12-develUpgrade postgresql13-llvmjit-develUpgrade postgresql16-develUpgrade postgresql15-serverUpgrade postgresql-llvmjitUpgrade postgresql15-contribUpgrade postgresql12-serverUpgrade postgresql15-llvmjitUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql16-docsUpgrade postgresql13-llvmjitUpgrade postgresql14-server-develUpgrade postgresql12-testUpgrade libpq5-32bitUpgrade postgresql14-docsUpgrade postgresql12-llvmjit-develUpgrade postgresql15-server-develUpgrade postgresql13-contribUpgrade postgresql-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql14-testUpgrade postgresql16-serverUpgrade postgresql12-pltclUpgrade postgresql16-llvmjit-develUpgrade postgresql-contribUpgrade postgresql12-plpythonUpgrade postgresqlUpgrade postgresql13-plperlUpgrade postgresql12Upgrade postgresql-docsUpgrade postgresql16-testUpgrade postgresql14-llvmjitUpgrade postgresql13-testUpgrade postgresql14-serverUpgrade postgresql13-docsUpgrade postgresql15-testUpgrade postgresql-serverUpgrade postgresql14Upgrade postgresql-testUpgrade postgresql16-llvmjitUpgrade postgresql13-serverUpgrade postgresql13-plpythonUpgrade postgresql12-contribUpgrade libecpg6-32bitUpgrade libpq5Upgrade postgresql15-llvmjit-develUpgrade postgresql14-plperlUpgrade postgresql14-develUpgrade postgresql13-develUpgrade postgresql13Upgrade postgresql-plperlUpgrade postgresql14-pltclUpgrade postgresql12-llvmjitUpgrade postgresql15Upgrade postgresql12-docsUpgrade postgresql16-devel-miniUpgrade postgresql15-pltclUpgrade postgresql16-plpythonUpgrade postgresql16Upgrade postgresql15-plpythonUpgrade libecpg6 | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-client-12Upgrade postgresql-15Upgrade postgresql-client-14Upgrade postgresql-client-15 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub