A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-docsUpgrade pg_repackUpgrade postgresqlUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgrade | Nov 4, 2022 | Aug 18, 2022 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql12Upgrade postgresqlUpgrade postgresql13Upgrade postgresql15 | Mar 26, 2024 | Aug 18, 2022 |
| Centos_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-docsUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufsUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-private-libsUpgrade postgresql-plpython3-debuginfo | Oct 26, 2022 | Aug 18, 2022 |
| Debian | — | Upgrade postgresql-13 | Aug 17, 2022 | Aug 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Nov 23, 2022 | Aug 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-test | Dec 9, 2022 | Aug 18, 2022 |
| Oracle_linux | — | Upgrade postgresql-private-develUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-upgrade-devel | Oct 27, 2022 | Aug 11, 2022 |
| Postgres | — | Upgrade to PostgreSQL version 14.5Upgrade to the latest version of PostgreSQL | Aug 18, 2022 | Aug 18, 2022 |
| Redhat_linux | — | Upgrade postgres-decoderbufs-debugsourceNo solution existsUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade pg_repack-debugsourceUpgrade postgresql-contribUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsource | Oct 26, 2022 | Aug 18, 2022 |
| Rocky_linux | — | Upgrade postgresql-upgrade-develUpgrade pg_repackUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-staticUpgrade pgauditUpgrade postgresql-serverUpgrade pg_repack-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3 | Mar 12, 2024 | Aug 18, 2022 |
| Suse | — | Upgrade postgresql10-pltclUpgrade postgresql13-testUpgrade postgresql-plperlUpgrade postgresql10-develUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql14-plpythonUpgrade postgresql12-plperlUpgrade postgresql14-contribUpgrade postgresql13-contribUpgrade postgresql12-develUpgrade postgresql10-plperlUpgrade postgresql13-llvmjitUpgrade postgresql12-llvmjit-develUpgrade postgresql13-docsUpgrade postgresql-docsUpgrade libpq5-32bitUpgrade postgresql12Upgrade postgresql12-testUpgrade postgresql14-develUpgrade postgresql14-plperlUpgrade postgresql14-server-develUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql12-docsUpgrade postgresql12-serverUpgrade postgresql13-plperlUpgrade postgresql10-contribUpgrade postgresql10-docsUpgrade postgresql13-pltclUpgrade postgresql13-develUpgrade postgresql10-llvmjit-develUpgrade postgresql13-llvmjit-develUpgrade postgresql-server-develUpgrade postgresql12-llvmjitUpgrade postgresql14-docsUpgrade postgresql14-pltclUpgrade postgresql13-plpythonUpgrade postgresql10-testUpgrade postgresql14-llvmjitUpgrade postgresql13-serverUpgrade postgresql13-server-develUpgrade postgresql10-serverUpgrade postgresql10-plpythonUpgrade libecpg6-32bitUpgrade libecpg6Upgrade postgresql12-contribUpgrade postgresql14-serverUpgrade postgresql13Upgrade postgresql14-llvmjit-develUpgrade libpq5Upgrade postgresql10Upgrade postgresql12-pltclUpgrade postgresql12-plpythonUpgrade postgresql-serverUpgrade postgresql12-server-develUpgrade postgresql14Upgrade postgresqlUpgrade postgresql14-test | Oct 26, 2022 | Aug 18, 2022 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-10 | Aug 19, 2022 | Aug 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub