schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade pg_repackUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-plperl | Jun 27, 2023 | Jun 9, 2023 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql13Upgrade postgresql12Upgrade postgresql15Upgrade postgresql | Mar 26, 2024 | Jun 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpythonUpgrade postgresql-plpython2Upgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-plperlUpgrade postgresql-llvmjitUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql | Sep 28, 2023 | Jun 9, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | May 13, 2025 | Jun 8, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-staticUpgrade postgresql15-serverUpgrade postgresql15-upgrade-develUpgrade postgresql15-plperlUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-plpython3Upgrade postgresql15-upgradeUpgrade postgresql15-private-libsUpgrade postgresql15-pltclUpgrade postgresql15-llvmjitUpgrade postgresql15-private-develUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15Upgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-testUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-server-develUpgrade postgresql15-contribUpgrade postgresql15-test-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-contrib-debuginfo | Feb 17, 2025 | May 11, 2023 |
| Centos_linux | — | Upgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-staticUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-private-libs-debuginfoUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debuginfoUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-contrib | Jun 22, 2023 | Jun 9, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | May 15, 2023 | May 15, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | May 11, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-plpython | Jan 10, 2024 | Jun 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs | Jun 22, 2023 | May 11, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.8Upgrade to the latest version of PostgreSQLUpgrade to PostgreSQL version 15.3 | Jun 9, 2023 | Jun 9, 2023 |
| Redhat_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade pg_repack-debugsourceUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade pgauditUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-develUpgrade postgres-decoderbufsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debuginfoNo solution existsUpgrade postgresql-pltclUpgrade postgresql-server-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade pg_repack-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfo | Jun 22, 2023 | Jun 9, 2023 |
| Rocky_linux | — | Upgrade postgresql-testUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-develUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-docsUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pgauditUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade pg_repack-debugsource | Mar 5, 2024 | Jun 9, 2023 |
| Suse | — | Upgrade postgresql13-serverUpgrade postgresql13-docsUpgrade postgresql12-docsUpgrade postgresql15-llvmjitUpgrade postgresql12-contribUpgrade postgresql14Upgrade postgresql15-plpythonUpgrade postgresql15-llvmjit-develUpgrade postgresql14-llvmjitUpgrade postgresql14-plpythonUpgrade postgresql12-serverUpgrade postgresql14-plperlUpgrade postgresql13-plpythonUpgrade postgresql13Upgrade libpq5-32bitUpgrade postgresql13-develUpgrade postgresql14-contribUpgrade postgresql13-plperlUpgrade libecpg6-32bitUpgrade postgresql13-testUpgrade postgresql15Upgrade postgresql13-llvmjitUpgrade postgresql14-develUpgrade postgresql14-llvmjit-develUpgrade postgresql12Upgrade libpq5Upgrade postgresql15-server-develUpgrade postgresql12-server-develUpgrade postgresql13-server-develUpgrade postgresql12-plpythonUpgrade postgresql15-develUpgrade postgresql12-pltclUpgrade postgresql13-contribUpgrade postgresql13-pltclUpgrade postgresql12-develUpgrade libecpg6Upgrade postgresql14-serverUpgrade postgresql15-contribUpgrade postgresql14-server-develUpgrade postgresql14-pltclUpgrade postgresql15-testUpgrade postgresql13-llvmjit-develUpgrade postgresql14-testUpgrade postgresql12-testUpgrade postgresql12-llvmjitUpgrade postgresql15-docsUpgrade postgresql15-serverUpgrade postgresql15-pltclUpgrade postgresql15-plperlUpgrade postgresql12-plperlUpgrade postgresql12-llvmjit-develUpgrade postgresql14-docs | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade postgresql-client-15Upgrade postgresql-12Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-client-10Upgrade postgresql-10Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-client-12Upgrade postgresql-client-14 | May 25, 2023 | May 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub