schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-staticUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-plpython3 | Jun 27, 2023 | Jun 9, 2023 |
| Alpine Linux | — | Upgrade postgresql13Upgrade postgresql15Upgrade postgresqlUpgrade postgresql12Upgrade postgresql14 | Mar 26, 2024 | Jun 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-plpython2Upgrade postgresql-develUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade postgresql-libsUpgrade postgresql-private-libsUpgrade postgresql-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql | Sep 28, 2023 | Jun 9, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | May 13, 2025 | Jun 8, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-staticUpgrade postgresql15-pltclUpgrade postgresql15-private-develUpgrade postgresql15-plperlUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-testUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-server-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15Upgrade postgresql15-contrib-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-docsUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-upgradeUpgrade postgresql15-private-libsUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-llvmjit | Feb 17, 2025 | May 11, 2023 |
| Centos_linux | — | Upgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-plperlUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-debuginfoUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-contribUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade pg_repackUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgradeUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade postgresql-private-develUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel | Jun 22, 2023 | Jun 9, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | May 15, 2023 | May 15, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | May 11, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-pltcl | Jan 10, 2024 | Jun 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql | Jun 22, 2023 | May 11, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.8Upgrade to PostgreSQL version 15.3 | Jun 9, 2023 | Jun 9, 2023 |
| Redhat_linux | — | Upgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade pg_repack-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-pltclNo solution existsUpgrade postgresql-private-libsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade postgresql-staticUpgrade pg_repackUpgrade pg_repack-debugsourceUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-docs | Jun 22, 2023 | Jun 9, 2023 |
| Rocky_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade pg_repackUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-libsUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel | Mar 5, 2024 | Jun 9, 2023 |
| Suse | — | Upgrade postgresql15-plperlUpgrade postgresql12-server-develUpgrade postgresql15-server-develUpgrade postgresql15-serverUpgrade postgresql13-server-develUpgrade libpq5Upgrade postgresql14-llvmjit-develUpgrade libecpg6Upgrade postgresql14-docsUpgrade postgresql15-testUpgrade postgresql14-server-develUpgrade postgresql15-contribUpgrade postgresql13-llvmjit-develUpgrade postgresql13-pltclUpgrade postgresql12-pltclUpgrade postgresql13-contribUpgrade postgresql14-testUpgrade postgresql12-develUpgrade postgresql12Upgrade postgresql12-llvmjitUpgrade postgresql12-plperlUpgrade postgresql12-plpythonUpgrade postgresql12-llvmjit-develUpgrade postgresql12-testUpgrade postgresql14-serverUpgrade postgresql14-pltclUpgrade postgresql15-docsUpgrade postgresql15-pltclUpgrade postgresql15-develUpgrade postgresql15-llvmjit-develUpgrade postgresql13-plpythonUpgrade postgresql12-docsUpgrade postgresql13-serverUpgrade postgresql13-docsUpgrade postgresql13Upgrade postgresql13-develUpgrade libpq5-32bitUpgrade postgresql12-serverUpgrade postgresql14-llvmjitUpgrade postgresql15-llvmjitUpgrade postgresql12-contribUpgrade postgresql15Upgrade postgresql14-develUpgrade postgresql14-plperlUpgrade postgresql13-llvmjitUpgrade postgresql14-plpythonUpgrade postgresql14Upgrade postgresql13-testUpgrade postgresql13-plperlUpgrade libecpg6-32bitUpgrade postgresql15-plpythonUpgrade postgresql14-contrib | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-client-12Upgrade postgresql-client-14Upgrade postgresql-14Upgrade postgresql-client-10Upgrade postgresql-10Upgrade postgresql-15Upgrade postgresql-client-15Upgrade postgresql-12Upgrade postgresql-client-9.5 (Ubuntu Pro) | May 25, 2023 | May 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub