In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpq-develUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade libpqUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql | Apr 6, 2023 | Mar 3, 2023 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresqlUpgrade postgresql15Upgrade postgresql14Upgrade postgresql13 | Aug 22, 2024 | Mar 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade libpq-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libsUpgrade libpq-debuginfoUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plpython2Upgrade postgresqlUpgrade libpqUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-plpython3 | Sep 28, 2023 | Mar 3, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-debugsourceUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-pltclUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-docsUpgrade postgresql15-contribUpgrade postgresql15-upgrade-develUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-plpython3Upgrade postgresql15-staticUpgrade postgresql15-private-develUpgrade postgresql15-server-develUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-upgradeUpgrade postgresql15-private-libsUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15Upgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-testUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-upgrade-debuginfo | Feb 17, 2025 | Feb 9, 2023 |
| Centos_linux | — | Upgrade postgresql-test-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade libpq-develUpgrade pg_repack-debugsourceUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade libpqUpgrade libpq-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade pg_repack-debuginfoUpgrade postgresql-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade pgauditUpgrade postgresql-testUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3Upgrade libpq-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pg_repackUpgrade libpq-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-devel | Apr 6, 2023 | Mar 3, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Feb 13, 2023 | Feb 13, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade postgresql13-clientUpgrade postgresql15-clientUpgrade postgresql14-clientUpgrade postgresql12-client | Feb 10, 2023 | Feb 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade libpqUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade pgauditUpgrade libpq-develUpgrade postgresql-upgrade-develUpgrade pg_repackUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-static | Apr 5, 2023 | Feb 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.7Upgrade to PostgreSQL version 15.2 | Mar 3, 2023 | Mar 3, 2023 |
| Redhat_linux | — | Upgrade postgresql-plpython3Upgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade libpq-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contribUpgrade libpq-debugsourceUpgrade libpqUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade pg_repack-debuginfoUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresqlUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade libpq-debuginfoUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgres-decoderbufsNo solution existsUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade libpq-develUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debugsource | Apr 6, 2023 | Mar 3, 2023 |
| Rocky_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-contrib-debuginfoUpgrade libpqUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-test-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade libpq-develUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfo | Mar 5, 2024 | Mar 3, 2023 |
| Suse | — | Upgrade postgresql14-llvmjit-develUpgrade postgresql15-server-develUpgrade postgresql14-contribUpgrade postgresql12-serverUpgrade postgresql14-server-develUpgrade postgresql13-plperlUpgrade postgresql12-develUpgrade postgresql15-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql15-plperlUpgrade postgresql14-develUpgrade postgresql13-serverUpgrade postgresql15Upgrade postgresql13-docsUpgrade postgresql13-contribUpgrade postgresql12-plpythonUpgrade libecpg6Upgrade postgresql15-develUpgrade postgresql12-contribUpgrade postgresql15-llvmjitUpgrade postgresql13-llvmjit-develUpgrade postgresql13Upgrade postgresql13-pltclUpgrade postgresql13-server-develUpgrade postgresql12-docsUpgrade postgresql12-pltclUpgrade postgresql14Upgrade postgresql12-server-develUpgrade postgresql15-docsUpgrade postgresql15-serverUpgrade postgresql13-llvmjitUpgrade postgresql15-plpythonUpgrade libecpg6-32bitUpgrade postgresql15-pltclUpgrade postgresql14-testUpgrade postgresql15-contribUpgrade postgresql12-llvmjitUpgrade postgresql14-plpythonUpgrade postgresql14-docsUpgrade postgresql13-plpythonUpgrade postgresql13-develUpgrade libpq5Upgrade postgresql12Upgrade postgresql14-plperlUpgrade postgresql14-pltclUpgrade postgresql12-plperlUpgrade postgresql14-llvmjitUpgrade postgresql13-testUpgrade postgresql14-serverUpgrade postgresql12-llvmjit-develUpgrade postgresql15-testUpgrade postgresql12-test | Feb 14, 2023 | Feb 14, 2023 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-client-14Upgrade postgresql-client-12 | Mar 22, 2023 | Mar 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub