A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-pltcl | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql16Upgrade postgresql12Upgrade postgresql14 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2Upgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-llvmjitUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql-docs | Jan 10, 2024 | Dec 10, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | Feb 6, 2025 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-plperl-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-pltclUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-plpython3Upgrade postgresql15-contribUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-debugsourceUpgrade postgresql15-server-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-staticUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-test-debuginfoUpgrade postgresql15-testUpgrade postgresql15Upgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-private-libsUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-upgradeUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-plperl | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-develUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-pltcl | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-devel | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-plpythonUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plpython3Upgrade postgresql-upgrade | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 11.22Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 12.17Upgrade to PostgreSQL version 13.13 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade pgauditUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-develUpgrade postgres-decoderbufsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-server-devel-debuginfoNo solution existsUpgrade postgresql-private-libs-debuginfoUpgrade pg_repackUpgrade postgresql-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-libsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-staticUpgrade pg_repackUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql13Upgrade postgresql15-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql16-devel-miniUpgrade postgresql12-testUpgrade postgresql16-plpythonUpgrade libecpg6-32bitUpgrade postgresql12-contribUpgrade postgresql12-docsUpgrade postgresql13-plpythonUpgrade postgresql-testUpgrade postgresql12-plpythonUpgrade libecpg6Upgrade postgresql12-server-develUpgrade postgresql14-llvmjitUpgrade postgresql15-testUpgrade postgresql14-pltclUpgrade libpq5Upgrade postgresql13-pltclUpgrade postgresql14-llvmjit-develUpgrade postgresql13-plperlUpgrade postgresql-serverUpgrade postgresql15-llvmjitUpgrade postgresql16-testUpgrade postgresql13-develUpgrade postgresql13-serverUpgrade postgresql12-serverUpgrade postgresql14-plperlUpgrade postgresql12-llvmjitUpgrade postgresql16-docsUpgrade postgresql13-docsUpgrade postgresql14-develUpgrade postgresql15-plpythonUpgrade postgresql13-testUpgrade postgresql13-llvmjit-develUpgrade postgresql14-serverUpgrade postgresqlUpgrade postgresql15Upgrade postgresql-docsUpgrade postgresql12-pltclUpgrade postgresql12Upgrade postgresql16-llvmjitUpgrade postgresql15-contribUpgrade postgresql-llvmjitUpgrade postgresql15-server-develUpgrade postgresql15-docsUpgrade postgresql14-testUpgrade postgresql-pltclUpgrade postgresql13-server-develUpgrade postgresql16-plperlUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql14-plpythonUpgrade postgresql-plpythonUpgrade postgresql14-server-develUpgrade postgresql12-develUpgrade postgresql12-plperlUpgrade postgresql16-contribUpgrade postgresql15-plperlUpgrade postgresql12-llvmjit-develUpgrade postgresql16-llvmjit-develUpgrade postgresql-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql14Upgrade postgresql14-docsUpgrade postgresql13-llvmjitUpgrade postgresql13-contribUpgrade postgresql-contribUpgrade postgresql16-pltclUpgrade postgresql16Upgrade postgresql15-develUpgrade postgresql16-server-develUpgrade postgresql16-serverUpgrade postgresql15-serverUpgrade postgresql-develUpgrade postgresql16-develUpgrade postgresql15-pltcl | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-client-15Upgrade postgresql-client-12Upgrade postgresql-12Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-client-14 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub