In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade libpq-develUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-pltclUpgrade pgauditUpgrade libpqUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macros | Apr 6, 2023 | Mar 3, 2023 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql14Upgrade postgresqlUpgrade postgresql12Upgrade postgresql15 | Aug 22, 2024 | Mar 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade libpqUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-plpython2Upgrade postgresql-private-libsUpgrade libpq-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade libpq-develUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresql-private-devel | Sep 28, 2023 | Mar 3, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-server-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-upgradeUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-testUpgrade postgresql15-server-develUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15Upgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-debugsourceUpgrade postgresql15-pltclUpgrade postgresql15-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-contribUpgrade postgresql15-llvmjitUpgrade postgresql15-docsUpgrade postgresql15-plperlUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-static | Feb 17, 2025 | Feb 9, 2023 |
| Centos_linux | — | Upgrade libpqUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docsUpgrade postgresql-contribUpgrade pg_repack-debugsourceUpgrade postgresql-staticUpgrade libpq-develUpgrade postgres-decoderbufs-debugsourceUpgrade libpq-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade libpq-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade pgauditUpgrade libpq-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade pgaudit-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-server-debuginfo | Apr 6, 2023 | Mar 3, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Feb 13, 2023 | Feb 13, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade postgresql13-clientUpgrade postgresql12-clientUpgrade postgresql14-clientUpgrade postgresql15-client | Feb 10, 2023 | Feb 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-serverUpgrade postgresql-upgradeUpgrade libpqUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgres-decoderbufsUpgrade pg_repackUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade libpq-devel | Apr 5, 2023 | Feb 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.7Upgrade to the latest version of PostgreSQLUpgrade to PostgreSQL version 15.2 | Mar 3, 2023 | Mar 3, 2023 |
| Redhat_linux | — | Upgrade pg_repackUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docsUpgrade libpq-debuginfoNo solution existsUpgrade postgresql-testUpgrade postgres-decoderbufs-debuginfoUpgrade libpq-develUpgrade postgresql-debuginfoUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-private-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsourceUpgrade libpq-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade libpqUpgrade libpq-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-contrib | Apr 6, 2023 | Mar 3, 2023 |
| Rocky_linux | — | Upgrade postgresqlUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-staticUpgrade pgaudit-debugsourceUpgrade postgresql-serverUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade libpq-develUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade libpqUpgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfo | Mar 5, 2024 | Mar 3, 2023 |
| Suse | — | Upgrade postgresql15-testUpgrade postgresql14-llvmjitUpgrade postgresql13-develUpgrade postgresql12Upgrade postgresql14-pltclUpgrade postgresql12-plperlUpgrade postgresql14-plperlUpgrade postgresql13-testUpgrade postgresql14-serverUpgrade libpq5Upgrade postgresql12-llvmjit-develUpgrade postgresql12-llvmjitUpgrade postgresql13-llvmjitUpgrade postgresql14-docsUpgrade postgresql15-contribUpgrade postgresql15-pltclUpgrade postgresql13-plpythonUpgrade postgresql14-plpythonUpgrade postgresql15-docsUpgrade libecpg6-32bitUpgrade postgresql12-testUpgrade postgresql15-plpythonUpgrade postgresql14-testUpgrade postgresql15-serverUpgrade postgresql12-contribUpgrade postgresql13-llvmjit-develUpgrade postgresql13-contribUpgrade postgresql13Upgrade postgresql14-server-develUpgrade postgresql13-plperlUpgrade libpq5-32bitUpgrade postgresql15-plperlUpgrade postgresql15-llvmjit-develUpgrade postgresql12-develUpgrade postgresql15-server-develUpgrade postgresql14Upgrade postgresql12-server-develUpgrade postgresql14-develUpgrade postgresql13-pltclUpgrade postgresql13-server-develUpgrade postgresql12-serverUpgrade postgresql15-develUpgrade postgresql13-serverUpgrade postgresql15-llvmjitUpgrade postgresql14-contribUpgrade postgresql14-llvmjit-develUpgrade postgresql12-docsUpgrade postgresql12-pltclUpgrade postgresql15Upgrade postgresql13-docsUpgrade postgresql12-plpythonUpgrade libecpg6 | Feb 14, 2023 | Feb 14, 2023 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-client-12Upgrade postgresql-client-14 | Mar 22, 2023 | Mar 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub