schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pgauditUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-upgrade-develUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-private-devel | Jun 27, 2023 | Jun 9, 2023 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql13Upgrade postgresql15Upgrade postgresql12Upgrade postgresql14 | Mar 26, 2024 | Jun 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-private-develUpgrade postgresql-plpython2Upgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-llvmjitUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-libsUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-private-libs | Sep 28, 2023 | Jun 9, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | May 13, 2025 | Jun 8, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15Upgrade postgresql15-test-rpm-macrosUpgrade postgresql15-test-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-testUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-private-develUpgrade postgresql15-serverUpgrade postgresql15-llvmjitUpgrade postgresql15-plperlUpgrade postgresql15-pltclUpgrade postgresql15-upgrade-develUpgrade postgresql15-plpython3Upgrade postgresql15-upgradeUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-docs | Feb 17, 2025 | May 11, 2023 |
| Centos_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade pg_repackUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade postgresql-private-develUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfo | Jun 22, 2023 | Jun 9, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | May 15, 2023 | May 15, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | May 11, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-plpython | Jan 10, 2024 | Jun 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-server-devel | Jun 22, 2023 | May 11, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.8Upgrade to PostgreSQL version 15.3 | Jun 9, 2023 | Jun 9, 2023 |
| Redhat_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresql-staticUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgres-decoderbufsUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-serverUpgrade pg_repackUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-server-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade pgaudit-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-debugsourceUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debugsourceNo solution existsUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade | Jun 22, 2023 | Jun 9, 2023 |
| Rocky_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-testUpgrade pg_repackUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgauditUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-test-rpm-macros | Mar 5, 2024 | Jun 9, 2023 |
| Suse | — | Upgrade postgresql12-serverUpgrade postgresql13-plpythonUpgrade postgresql13Upgrade postgresql14-develUpgrade postgresql15Upgrade postgresql14-plpythonUpgrade postgresql14-llvmjitUpgrade postgresql15-llvmjit-develUpgrade postgresql12-contribUpgrade postgresql13-serverUpgrade postgresql13-plperlUpgrade postgresql13-docsUpgrade postgresql14-contribUpgrade libecpg6-32bitUpgrade postgresql15-plpythonUpgrade postgresql14Upgrade libpq5-32bitUpgrade postgresql13-testUpgrade postgresql12-docsUpgrade postgresql15-llvmjitUpgrade postgresql13-develUpgrade postgresql13-llvmjitUpgrade postgresql14-plperlUpgrade postgresql13-pltclUpgrade postgresql12-server-develUpgrade postgresql15-contribUpgrade postgresql13-llvmjit-develUpgrade postgresql14-docsUpgrade postgresql15-server-develUpgrade postgresql15-testUpgrade libecpg6Upgrade postgresql12-develUpgrade postgresql15-docsUpgrade postgresql14-testUpgrade postgresql12-testUpgrade postgresql12Upgrade postgresql12-llvmjitUpgrade postgresql13-contribUpgrade postgresql12-pltclUpgrade postgresql14-llvmjit-develUpgrade libpq5Upgrade postgresql14-pltclUpgrade postgresql14-serverUpgrade postgresql15-develUpgrade postgresql15-pltclUpgrade postgresql13-server-develUpgrade postgresql12-plperlUpgrade postgresql12-plpythonUpgrade postgresql15-plperlUpgrade postgresql12-llvmjit-develUpgrade postgresql14-server-develUpgrade postgresql15-server | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade postgresql-12Upgrade postgresql-client-15Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-client-14Upgrade postgresql-client-10Upgrade postgresql-15Upgrade postgresql-10Upgrade postgresql-client-12Upgrade postgresql-14 | May 25, 2023 | May 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub