In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-contribUpgrade libpqUpgrade libpq-develUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-plpython3 | Apr 6, 2023 | Mar 3, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql12Upgrade postgresqlUpgrade postgresql13Upgrade postgresql14 | Aug 22, 2024 | Mar 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libpq-develUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-llvmjitUpgrade postgresql-upgradeUpgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade libpq-debuginfoUpgrade postgresql-plperlUpgrade libpqUpgrade postgresql-plpython3Upgrade postgresql-plpython2 | Sep 28, 2023 | Mar 3, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-test-rpm-macrosUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-testUpgrade postgresql15-upgradeUpgrade postgresql15Upgrade postgresql15-contrib-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-llvmjitUpgrade postgresql15-plperlUpgrade postgresql15-contribUpgrade postgresql15-docsUpgrade postgresql15-plpython3Upgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-pltclUpgrade postgresql15-serverUpgrade postgresql15-debuginfo | Feb 17, 2025 | Feb 9, 2023 |
| Centos_linux | — | Upgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade libpq-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade pg_repackUpgrade pgauditUpgrade postgresql-debugsourceUpgrade postgresql-debuginfoUpgrade pgaudit-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresqlUpgrade libpq-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade postgresql-plperl-debuginfoUpgrade libpq-develUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade libpqUpgrade libpq-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfo | Apr 6, 2023 | Mar 3, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Feb 13, 2023 | Feb 13, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade postgresql13-clientUpgrade postgresql15-clientUpgrade postgresql14-clientUpgrade postgresql12-client | Feb 10, 2023 | Feb 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plpython3Upgrade libpqUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade libpq-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-private-libsUpgrade pg_repack | Apr 5, 2023 | Feb 9, 2023 |
| Postgres | — | Upgrade to the latest version of PostgreSQLUpgrade to PostgreSQL version 14.7Upgrade to PostgreSQL version 15.2 | Mar 3, 2023 | Mar 3, 2023 |
| Redhat_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contribUpgrade libpq-debugsourceUpgrade libpqUpgrade postgresql-plpython3Upgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade libpq-devel-debuginfoUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-testNo solution existsUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-server-debuginfoUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade libpq-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repackUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debuginfoUpgrade libpq-devel | Apr 6, 2023 | Mar 3, 2023 |
| Rocky_linux | — | Upgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debugsourceUpgrade pgauditUpgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade libpqUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade libpq-develUpgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-debuginfo | Mar 5, 2024 | Mar 3, 2023 |
| Suse | — | Upgrade postgresql12-serverUpgrade postgresql15-llvmjit-develUpgrade postgresql15Upgrade postgresql13-llvmjit-develUpgrade postgresql13-contribUpgrade postgresql13-serverUpgrade postgresql12-contribUpgrade postgresql15-llvmjitUpgrade postgresql12-plpythonUpgrade postgresql13Upgrade postgresql13-pltclUpgrade postgresql12-docsUpgrade postgresql12-server-develUpgrade postgresql14Upgrade postgresql14-develUpgrade postgresql14-contribUpgrade postgresql12-pltclUpgrade postgresql13-docsUpgrade postgresql15-develUpgrade postgresql15-server-develUpgrade postgresql12-develUpgrade libecpg6Upgrade libpq5-32bitUpgrade postgresql14-llvmjit-develUpgrade postgresql13-server-develUpgrade postgresql15-plperlUpgrade postgresql13-plperlUpgrade postgresql14-server-develUpgrade postgresql15-contribUpgrade postgresql14-serverUpgrade postgresql12-llvmjit-develUpgrade postgresql15-testUpgrade postgresql14-testUpgrade postgresql15-pltclUpgrade postgresql15-plpythonUpgrade libecpg6-32bitUpgrade postgresql13-llvmjitUpgrade postgresql14-plpythonUpgrade postgresql13-plpythonUpgrade postgresql12-llvmjitUpgrade postgresql13-testUpgrade libpq5Upgrade postgresql12Upgrade postgresql12-plperlUpgrade postgresql14-plperlUpgrade postgresql14-pltclUpgrade postgresql15-docsUpgrade postgresql15-serverUpgrade postgresql13-develUpgrade postgresql14-llvmjitUpgrade postgresql14-docsUpgrade postgresql12-test | Feb 14, 2023 | Feb 14, 2023 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-client-12Upgrade postgresql-client-14 | Mar 22, 2023 | Mar 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub