A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade pgaudit | Nov 4, 2022 | Aug 18, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql12Upgrade postgresql15Upgrade postgresqlUpgrade postgresql13 | Mar 26, 2024 | Aug 18, 2022 |
| Centos_linux | — | Upgrade postgresql-server-develUpgrade pgauditUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade pg_repack-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgresql-docsUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-docs-debuginfoUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3 | Oct 26, 2022 | Aug 18, 2022 |
| Debian | — | Upgrade postgresql-13 | Aug 17, 2022 | Aug 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Aug 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-testUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plpython | Dec 9, 2022 | Aug 18, 2022 |
| Oracle_linux | — | Upgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgresql-test | Oct 27, 2022 | Aug 11, 2022 |
| Postgres | — | Upgrade to PostgreSQL version 14.5 | Aug 18, 2022 | Aug 18, 2022 |
| Redhat_linux | — | Upgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-serverUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceNo solution existsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade pg_repack-debuginfoUpgrade pg_repack-debugsource | Oct 26, 2022 | Aug 18, 2022 |
| Rocky_linux | — | Upgrade postgresql-plpython3Upgrade pg_repack-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-upgradeUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-test-debuginfo | Mar 12, 2024 | Aug 18, 2022 |
| Suse | — | Upgrade postgresql10-pltclUpgrade postgresql-contribUpgrade postgresql14-contribUpgrade postgresql12-llvmjit-develUpgrade postgresql13-testUpgrade postgresql14-server-develUpgrade postgresql12-develUpgrade postgresql10-develUpgrade libpq5-32bitUpgrade postgresql13-llvmjitUpgrade postgresql12-testUpgrade postgresql14-plpythonUpgrade postgresql-pltclUpgrade postgresql10-contribUpgrade postgresql-docsUpgrade postgresql13-plperlUpgrade postgresql13-contribUpgrade postgresql13-docsUpgrade postgresql14-plperlUpgrade postgresql14-develUpgrade postgresql10-plperlUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql10-docsUpgrade postgresql12Upgrade postgresql12-docsUpgrade postgresql12-serverUpgrade postgresql12-plperlUpgrade postgresql-plpythonUpgrade postgresql14-pltclUpgrade postgresql14-llvmjitUpgrade postgresql14-docsUpgrade postgresql13-server-develUpgrade postgresql13-serverUpgrade postgresql12-llvmjitUpgrade postgresql-serverUpgrade postgresql12-plpythonUpgrade postgresql13-plpythonUpgrade libpq5Upgrade postgresql13-llvmjit-develUpgrade postgresql10-llvmjit-develUpgrade postgresqlUpgrade libecpg6Upgrade libecpg6-32bitUpgrade postgresql12-contribUpgrade postgresql14-serverUpgrade postgresql13Upgrade postgresql10-serverUpgrade postgresql10-plpythonUpgrade postgresql-server-develUpgrade postgresql12-pltclUpgrade postgresql10Upgrade postgresql13-develUpgrade postgresql14-testUpgrade postgresql12-server-develUpgrade postgresql14Upgrade postgresql10-testUpgrade postgresql14-llvmjit-develUpgrade postgresql13-pltcl | Oct 26, 2022 | Aug 18, 2022 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-10 | Aug 19, 2022 | Aug 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub