In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade libpqUpgrade pgauditUpgrade libpq-develUpgrade postgresql-docsUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-upgrade | Apr 6, 2023 | Mar 3, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql13Upgrade postgresqlUpgrade postgresql14Upgrade postgresql12 | Aug 22, 2024 | Mar 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresqlUpgrade postgresql-private-libsUpgrade libpq-debuginfoUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-plpython2Upgrade postgresql-testUpgrade libpqUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-llvmjitUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-docsUpgrade libpq-develUpgrade postgresql-upgrade | Sep 28, 2023 | Mar 3, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-private-libsUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-upgradeUpgrade postgresql15Upgrade postgresql15-private-develUpgrade postgresql15-server-debuginfoUpgrade postgresql15-testUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-upgrade-develUpgrade postgresql15-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-plperlUpgrade postgresql15-contribUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-debugsourceUpgrade postgresql15-pltclUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-plpython3 | Feb 17, 2025 | Feb 9, 2023 |
| Centos_linux | — | Upgrade libpq-debuginfoUpgrade pgauditUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3Upgrade libpq-debugsourceUpgrade postgresqlUpgrade postgresql-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-private-libs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-staticUpgrade pg_repack-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade libpqUpgrade postgresql-docsUpgrade libpq-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade libpq-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib | Apr 6, 2023 | Mar 3, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Feb 13, 2023 | Feb 13, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade postgresql12-clientUpgrade postgresql14-clientUpgrade postgresql15-clientUpgrade postgresql13-client | Feb 10, 2023 | Feb 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-server-develUpgrade libpq-develUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade pg_repackUpgrade pgauditUpgrade postgresql-private-libsUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade libpq | Apr 5, 2023 | Feb 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.2Upgrade to PostgreSQL version 14.7 | Mar 3, 2023 | Mar 3, 2023 |
| Redhat_linux | — | Upgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plperl-debuginfoUpgrade libpq-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-private-libsUpgrade pgaudit-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3-debuginfoUpgrade libpqUpgrade postgresql-serverUpgrade libpq-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgauditUpgrade postgresql-server-debuginfoUpgrade pg_repack-debugsourceUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresql-upgrade-develNo solution existsUpgrade libpq-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-develUpgrade postgresql-debugsourceUpgrade libpq-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-server-devel-debuginfo | Apr 6, 2023 | Mar 3, 2023 |
| Rocky_linux | — | Upgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade postgresql-plperlUpgrade libpq-develUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade pgauditUpgrade postgresql-server-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade libpqUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfo | Mar 5, 2024 | Mar 3, 2023 |
| Suse | — | Upgrade postgresql15-testUpgrade postgresql13-plpythonUpgrade postgresql13-llvmjitUpgrade postgresql12-llvmjitUpgrade postgresql14-docsUpgrade postgresql14-testUpgrade postgresql14-plpythonUpgrade postgresql15-contribUpgrade postgresql15-pltclUpgrade postgresql15-serverUpgrade postgresql12-plperlUpgrade postgresql13-testUpgrade postgresql14-serverUpgrade postgresql14-plperlUpgrade postgresql14-pltclUpgrade libpq5Upgrade postgresql15-plpythonUpgrade postgresql12-llvmjit-develUpgrade postgresql14-llvmjitUpgrade postgresql15-docsUpgrade libecpg6-32bitUpgrade postgresql12-testUpgrade postgresql12Upgrade postgresql13-develUpgrade postgresql15-llvmjit-develUpgrade postgresql14-server-develUpgrade postgresql12-pltclUpgrade postgresql15Upgrade postgresql14Upgrade postgresql13-llvmjit-develUpgrade postgresql13-serverUpgrade postgresql12-server-develUpgrade postgresql12-contribUpgrade postgresql15-plperlUpgrade postgresql13-server-develUpgrade postgresql13Upgrade postgresql13-docsUpgrade postgresql14-develUpgrade postgresql13-plperlUpgrade postgresql12-develUpgrade postgresql15-server-develUpgrade postgresql12-docsUpgrade postgresql14-contribUpgrade postgresql14-llvmjit-develUpgrade postgresql12-serverUpgrade postgresql13-pltclUpgrade postgresql13-contribUpgrade postgresql15-develUpgrade libpq5-32bitUpgrade postgresql12-plpythonUpgrade libecpg6Upgrade postgresql15-llvmjit | Feb 14, 2023 | Feb 14, 2023 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-client-14Upgrade postgresql-client-12 | Mar 22, 2023 | Mar 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub