A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-plpython3 | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresql16Upgrade postgresql12 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-plpython2Upgrade postgresql-upgradeUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-libsUpgrade postgresql-llvmjitUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql-test | Jan 10, 2024 | Dec 10, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | Feb 6, 2025 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-upgradeUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15Upgrade postgresql15-staticUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-docsUpgrade postgresql15-server-develUpgrade postgresql15-private-libsUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-testUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-debugsourceUpgrade postgresql15-server-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-llvmjit | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-testUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-upgradeUpgrade postgresql-libsUpgrade postgresql-plpython | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-contrib | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libsUpgrade pg_repack | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 14.10 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-libsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-plpython3Upgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-develUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repackUpgrade postgresql-private-develNo solution existsUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contribUpgrade postgresql-private-libsUpgrade pgauditUpgrade postgresql-staticUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsource | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresqlUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade pg_repack-debugsourceUpgrade pg_repackUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade pgaudit-debugsourceUpgrade postgresql-upgradeUpgrade pg_repack-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docs-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql14-docsUpgrade postgresql-contribUpgrade postgresql12Upgrade postgresql15-docsUpgrade postgresql-llvmjitUpgrade postgresql16-develUpgrade postgresql13-llvmjitUpgrade postgresql-develUpgrade postgresql13-contribUpgrade postgresql14-testUpgrade postgresql16-pltclUpgrade postgresql15-server-develUpgrade postgresql-llvmjit-develUpgrade postgresql14Upgrade postgresql16-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql-pltclUpgrade postgresql15-pltclUpgrade postgresql14-plpythonUpgrade postgresql-plperlUpgrade postgresql16-llvmjitUpgrade postgresql-server-develUpgrade postgresql16-plperlUpgrade postgresql15-contribUpgrade postgresql15-serverUpgrade postgresql16-serverUpgrade postgresql16-contribUpgrade postgresql12-llvmjit-develUpgrade postgresql15-plperlUpgrade postgresql12-develUpgrade postgresql12-plperlUpgrade postgresql15-develUpgrade postgresql14-server-develUpgrade postgresql-plpythonUpgrade postgresql16-server-develUpgrade postgresql16Upgrade postgresql13-server-develUpgrade postgresql16-testUpgrade libpq5Upgrade postgresql12-serverUpgrade postgresql12-llvmjitUpgrade postgresql16-devel-miniUpgrade postgresql-serverUpgrade postgresql14-serverUpgrade postgresql13-serverUpgrade postgresql15Upgrade postgresql14-llvmjitUpgrade postgresql15-plpythonUpgrade postgresql13-develUpgrade postgresql15-llvmjitUpgrade postgresql14-llvmjit-develUpgrade postgresql14-develUpgrade postgresql13-pltclUpgrade postgresql13-plperlUpgrade postgresqlUpgrade postgresql16-plpythonUpgrade postgresql15-testUpgrade libecpg6Upgrade postgresql-testUpgrade postgresql14-contribUpgrade postgresql13-plpythonUpgrade postgresql12-plpythonUpgrade postgresql12-docsUpgrade postgresql12-contribUpgrade libecpg6-32bitUpgrade postgresql12-testUpgrade postgresql12-server-develUpgrade postgresql14-pltclUpgrade postgresql15-llvmjit-develUpgrade postgresql13-testUpgrade postgresql13-llvmjit-develUpgrade postgresql12-pltclUpgrade postgresql-docsUpgrade postgresql13Upgrade postgresql16-docsUpgrade postgresql14-plperlUpgrade postgresql13-docs | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-12Upgrade postgresql-client-14Upgrade postgresql-client-12Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-client-15Upgrade postgresql-10 (Ubuntu Pro) | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub