In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-server-develUpgrade pg_repackUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-private-develUpgrade postgresql-plperlUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade libpq-develUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade libpqUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade pgaudit | Apr 6, 2023 | Mar 3, 2023 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql12Upgrade postgresql15Upgrade postgresqlUpgrade postgresql13 | Aug 22, 2024 | Mar 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresqlUpgrade libpq-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-plpython2Upgrade libpqUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade libpq-develUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-llvmjitUpgrade postgresql-staticUpgrade postgresql-upgrade | Sep 28, 2023 | Mar 3, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-testUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15Upgrade postgresql15-test-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-upgradeUpgrade postgresql15-server-develUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-staticUpgrade postgresql15-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-llvmjitUpgrade postgresql15-pltclUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-serverUpgrade postgresql15-upgrade-develUpgrade postgresql15-debugsourceUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-plperl-debuginfo | Feb 17, 2025 | Feb 9, 2023 |
| Centos_linux | — | Upgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade postgresqlUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade libpq-debugsourceUpgrade postgresql-debuginfoUpgrade libpq-debuginfoUpgrade pg_repackUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade pg_repack-debuginfoUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-private-libs-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-contribUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade libpq-develUpgrade postgresql-contrib-debuginfoUpgrade libpq-devel-debuginfoUpgrade libpqUpgrade postgresql-docs | Apr 6, 2023 | Mar 3, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Feb 13, 2023 | Feb 13, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade postgresql14-clientUpgrade postgresql15-clientUpgrade postgresql12-clientUpgrade postgresql13-client | Feb 10, 2023 | Feb 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade libpqUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade libpq-develUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql-contrib | Apr 5, 2023 | Feb 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.7Upgrade to PostgreSQL version 15.2 | Mar 3, 2023 | Mar 3, 2023 |
| Redhat_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade libpq-develUpgrade pg_repack-debugsourceUpgrade postgresql-testNo solution existsUpgrade pg_repackUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-test-debuginfoUpgrade libpq-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade libpq-debugsourceUpgrade postgresql-private-libsUpgrade pgaudit-debuginfoUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade libpq-devel-debuginfoUpgrade libpqUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfo | Apr 6, 2023 | Mar 3, 2023 |
| Rocky_linux | — | Upgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-docsUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade libpq-develUpgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade libpqUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debuginfo | Mar 5, 2024 | Mar 3, 2023 |
| Suse | — | Upgrade postgresql14-plpythonUpgrade postgresql13-llvmjitUpgrade postgresql13-plpythonUpgrade postgresql13-develUpgrade postgresql14-pltclUpgrade libpq5Upgrade postgresql12Upgrade postgresql12-plperlUpgrade postgresql12-llvmjitUpgrade postgresql14-docsUpgrade postgresql12-llvmjit-develUpgrade postgresql15-contribUpgrade postgresql14-plperlUpgrade postgresql15-testUpgrade postgresql14-llvmjitUpgrade postgresql14-serverUpgrade postgresql15-pltclUpgrade libecpg6-32bitUpgrade postgresql15-plpythonUpgrade postgresql15-serverUpgrade postgresql14-testUpgrade postgresql13-testUpgrade postgresql15-docsUpgrade postgresql12-testUpgrade postgresql15-llvmjit-develUpgrade postgresql15-server-develUpgrade postgresql13-plperlUpgrade postgresql14-server-develUpgrade postgresql12-develUpgrade libpq5-32bitUpgrade postgresql15-plperlUpgrade postgresql13-docsUpgrade postgresql14-develUpgrade postgresql13Upgrade postgresql13-pltclUpgrade postgresql13-server-develUpgrade postgresql14-contribUpgrade postgresql14-llvmjit-develUpgrade postgresql12-plpythonUpgrade libecpg6Upgrade postgresql15-llvmjitUpgrade postgresql15-develUpgrade postgresql12-serverUpgrade postgresql12-contribUpgrade postgresql13-contribUpgrade postgresql15Upgrade postgresql12-docsUpgrade postgresql13-serverUpgrade postgresql14Upgrade postgresql12-server-develUpgrade postgresql12-pltclUpgrade postgresql13-llvmjit-devel | Feb 14, 2023 | Feb 14, 2023 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-client-12Upgrade postgresql-client-14 | Mar 22, 2023 | Mar 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub