In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpqUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade libpq-develUpgrade pgauditUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-private-devel | Apr 6, 2023 | Mar 3, 2023 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql15Upgrade postgresqlUpgrade postgresql14Upgrade postgresql13 | Aug 22, 2024 | Mar 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-llvmjitUpgrade postgresql-docsUpgrade libpq-develUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-plpython2Upgrade postgresql-pltclUpgrade libpq-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade libpqUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server | Sep 28, 2023 | Mar 3, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-docsUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-contribUpgrade postgresql15-llvmjitUpgrade postgresql15-plpython3Upgrade postgresql15-staticUpgrade postgresql15-plperlUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15-upgrade-develUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15Upgrade postgresql15-server-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-server-develUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-private-libsUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-test | Feb 17, 2025 | Feb 9, 2023 |
| Centos_linux | — | Upgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade libpq-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-server-debuginfoUpgrade libpq-debuginfoUpgrade postgresqlUpgrade pgauditUpgrade pgaudit-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsourceUpgrade libpq-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contribUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade libpq-devel-debuginfoUpgrade libpqUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-test-debuginfo | Apr 6, 2023 | Mar 3, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Feb 13, 2023 | Feb 13, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade postgresql15-clientUpgrade postgresql14-clientUpgrade postgresql12-clientUpgrade postgresql13-client | Feb 10, 2023 | Feb 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-staticUpgrade pg_repackUpgrade postgresql-private-libsUpgrade postgresql-docsUpgrade libpq-develUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresqlUpgrade libpqUpgrade postgresql-serverUpgrade postgresql-test | Apr 5, 2023 | Feb 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.2Upgrade to PostgreSQL version 14.7 | Mar 3, 2023 | Mar 3, 2023 |
| Redhat_linux | — | Upgrade postgresql-pltcl-debuginfoNo solution existsUpgrade postgresql-docsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade libpq-debuginfoUpgrade postgresql-staticUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgresql-debugsourceUpgrade postgresql-server-debuginfoUpgrade libpq-develUpgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade pg_repack-debugsourceUpgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade libpq-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade libpqUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contribUpgrade postgresql-private-libsUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade pg_repack-debuginfoUpgrade libpq-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql | Apr 6, 2023 | Mar 3, 2023 |
| Rocky_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade pgaudit-debuginfoUpgrade pgauditUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade libpqUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-testUpgrade postgresql-plperl-debuginfoUpgrade libpq-develUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfo | Mar 5, 2024 | Mar 3, 2023 |
| Suse | — | Upgrade postgresql15-plpythonUpgrade postgresql15-docsUpgrade postgresql13-develUpgrade postgresql15-pltclUpgrade postgresql14-llvmjitUpgrade postgresql15-serverUpgrade postgresql13-testUpgrade postgresql15-testUpgrade libecpg6-32bitUpgrade postgresql12-llvmjit-develUpgrade postgresql12-testUpgrade postgresql14-plperlUpgrade postgresql14-pltclUpgrade postgresql14-testUpgrade postgresql14-plpythonUpgrade postgresql12-llvmjitUpgrade postgresql13-llvmjitUpgrade postgresql15-contribUpgrade postgresql13-plpythonUpgrade postgresql14-serverUpgrade postgresql14-docsUpgrade libpq5Upgrade postgresql12Upgrade postgresql12-plperlUpgrade postgresql12-server-develUpgrade postgresql12-pltclUpgrade postgresql15Upgrade postgresql15-llvmjit-develUpgrade postgresql13-plperlUpgrade postgresql15-plperlUpgrade postgresql15-server-develUpgrade libpq5-32bitUpgrade postgresql12-serverUpgrade postgresql12-plpythonUpgrade libecpg6Upgrade postgresql12-develUpgrade postgresql14-server-develUpgrade postgresql13Upgrade postgresql13-llvmjit-develUpgrade postgresql13-pltclUpgrade postgresql13-server-develUpgrade postgresql15-develUpgrade postgresql14-develUpgrade postgresql13-docsUpgrade postgresql14-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql12-docsUpgrade postgresql13-contribUpgrade postgresql14Upgrade postgresql12-contribUpgrade postgresql13-serverUpgrade postgresql15-llvmjit | Feb 14, 2023 | Feb 14, 2023 |
| Ubuntu | — | Upgrade postgresql-client-14Upgrade postgresql-client-12Upgrade postgresql-14Upgrade postgresql-12 | Mar 22, 2023 | Mar 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub