A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-server-develUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-docsUpgrade pg_repack | Nov 4, 2022 | Aug 18, 2022 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql13Upgrade postgresqlUpgrade postgresql12Upgrade postgresql14 | Mar 26, 2024 | Aug 18, 2022 |
| Centos_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-test-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-docsUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade pgaudit-debuginfo | Oct 26, 2022 | Aug 18, 2022 |
| Debian | — | Upgrade postgresql-13 | Aug 17, 2022 | Aug 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Aug 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plpython | Dec 9, 2022 | Aug 18, 2022 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresql-upgrade-develUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-staticUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-docs | Oct 27, 2022 | Aug 11, 2022 |
| Postgres | — | Upgrade to PostgreSQL version 14.5 | Aug 18, 2022 | Aug 18, 2022 |
| Redhat_linux | — | Upgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperlUpgrade postgresqlNo solution existsUpgrade postgresql-test-debuginfoUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade pgaudit | Oct 26, 2022 | Aug 18, 2022 |
| Rocky_linux | — | Upgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-docs-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pg_repack-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repackUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperlUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfo | Mar 12, 2024 | Aug 18, 2022 |
| Suse | — | Upgrade libpq5Upgrade postgresql10Upgrade postgresql13-develUpgrade postgresql12-contribUpgrade postgresql10-llvmjit-develUpgrade postgresql14-testUpgrade postgresqlUpgrade postgresql12-server-develUpgrade postgresql14-serverUpgrade postgresql14Upgrade postgresql-serverUpgrade postgresql13-llvmjit-develUpgrade postgresql-server-develUpgrade postgresql10-plpythonUpgrade postgresql12-plpythonUpgrade postgresql14-llvmjit-develUpgrade postgresql13-pltclUpgrade postgresql13-server-develUpgrade postgresql12-llvmjitUpgrade postgresql13Upgrade libecpg6Upgrade postgresql13-plpythonUpgrade postgresql12-pltclUpgrade postgresql14-llvmjitUpgrade postgresql14-docsUpgrade postgresql10-testUpgrade libecpg6-32bitUpgrade postgresql10-serverUpgrade postgresql13-serverUpgrade postgresql14-pltclUpgrade postgresql12-llvmjit-develUpgrade postgresql13-llvmjitUpgrade postgresql12-plperlUpgrade postgresql12-docsUpgrade postgresql-plpythonUpgrade postgresql10-pltclUpgrade postgresql10-develUpgrade postgresql13-testUpgrade postgresql14-plpythonUpgrade postgresql12-develUpgrade postgresql14-contribUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql10-plperlUpgrade libpq5-32bitUpgrade postgresql12-testUpgrade postgresql13-docsUpgrade postgresql13-contribUpgrade postgresql14-server-develUpgrade postgresql13-plperlUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql10-contribUpgrade postgresql-docsUpgrade postgresql14-develUpgrade postgresql12Upgrade postgresql10-docsUpgrade postgresql14-plperlUpgrade postgresql12-server | Oct 26, 2022 | Aug 18, 2022 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-10 | Aug 19, 2022 | Aug 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub