A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-private-libsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-docs | Nov 4, 2022 | Aug 18, 2022 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresqlUpgrade postgresql13Upgrade postgresql15Upgrade postgresql14 | Mar 26, 2024 | Aug 18, 2022 |
| Centos_linux | — | Upgrade postgresql-staticUpgrade pg_repack-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docsUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade pg_repack-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-pltclUpgrade postgresql-server-debuginfoUpgrade postgresql-plperlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfo | Oct 26, 2022 | Aug 18, 2022 |
| Debian | — | Upgrade postgresql-13 | Aug 17, 2022 | Aug 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Aug 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-test | Dec 9, 2022 | Aug 18, 2022 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-private-develUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresqlUpgrade pgauditUpgrade postgresql-docs | Oct 27, 2022 | Aug 11, 2022 |
| Postgres | — | Upgrade to PostgreSQL version 14.5 | Aug 18, 2022 | Aug 18, 2022 |
| Redhat_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade pg_repack-debuginfoUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repackUpgrade postgresqlNo solution existsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql-upgrade-debuginfo | Oct 26, 2022 | Aug 18, 2022 |
| Rocky_linux | — | Upgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-upgrade-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade pg_repackUpgrade postgresql-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgres-decoderbufs | Mar 12, 2024 | Aug 18, 2022 |
| Suse | — | Upgrade postgresql13-plpythonUpgrade postgresql13-serverUpgrade postgresql13-server-develUpgrade postgresql10-testUpgrade postgresql13-develUpgrade libecpg6-32bitUpgrade postgresql-server-develUpgrade postgresql12-contribUpgrade postgresql10-plpythonUpgrade postgresql14Upgrade postgresqlUpgrade postgresql13Upgrade postgresql10-llvmjit-develUpgrade postgresql12-server-develUpgrade postgresql14-docsUpgrade libpq5Upgrade postgresql10Upgrade postgresql14-llvmjit-develUpgrade postgresql14-pltclUpgrade postgresql14-serverUpgrade postgresql12-llvmjitUpgrade postgresql14-llvmjitUpgrade postgresql13-llvmjit-develUpgrade postgresql-serverUpgrade postgresql10-serverUpgrade postgresql13-pltclUpgrade libecpg6Upgrade postgresql14-testUpgrade postgresql12-plpythonUpgrade postgresql12-pltclUpgrade postgresql12-plperlUpgrade postgresql-plpythonUpgrade postgresql13-testUpgrade postgresql10-develUpgrade postgresql12-testUpgrade libpq5-32bitUpgrade postgresql12Upgrade postgresql10-docsUpgrade postgresql14-plperlUpgrade postgresql14-develUpgrade postgresql12-serverUpgrade postgresql12-docsUpgrade postgresql14-server-develUpgrade postgresql12-develUpgrade postgresql14-contribUpgrade postgresql12-llvmjit-develUpgrade postgresql-contribUpgrade postgresql10-plperlUpgrade postgresql13-contribUpgrade postgresql13-docsUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql10-contribUpgrade postgresql13-plperlUpgrade postgresql13-llvmjitUpgrade postgresql14-plpythonUpgrade postgresql10-pltcl | Oct 26, 2022 | Aug 18, 2022 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-12Upgrade postgresql-14 | Aug 19, 2022 | Aug 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub