schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-server-develUpgrade postgresql-testUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-private-libsUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-private-devel | Jun 27, 2023 | Jun 9, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql12Upgrade postgresqlUpgrade postgresql13Upgrade postgresql14 | Mar 26, 2024 | Jun 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-develUpgrade postgresql-staticUpgrade postgresql-plpythonUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-libsUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-test | Sep 28, 2023 | Jun 9, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | May 13, 2025 | Jun 8, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-server-develUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-testUpgrade postgresql15Upgrade postgresql15-plperl-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-llvmjitUpgrade postgresql15-docsUpgrade postgresql15-staticUpgrade postgresql15-private-develUpgrade postgresql15-plperlUpgrade postgresql15-private-libsUpgrade postgresql15-pltclUpgrade postgresql15-server | Feb 17, 2025 | May 11, 2023 |
| Centos_linux | — | Upgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade postgresql-private-develUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-contribUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgresql-server-develUpgrade postgresql-private-libs-debuginfo | Jun 22, 2023 | Jun 9, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | May 15, 2023 | May 15, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | May 11, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-plpython | Jan 10, 2024 | Jun 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade postgresql-private-libsUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade pg_repackUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-docs | Jun 22, 2023 | May 11, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.3Upgrade to PostgreSQL version 14.8 | Jun 9, 2023 | Jun 9, 2023 |
| Redhat_linux | — | Upgrade postgresql-testUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoNo solution existsUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-develUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-test-debuginfoUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade pg_repackUpgrade pgauditUpgrade postgresql-staticUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs | Jun 22, 2023 | Jun 9, 2023 |
| Rocky_linux | — | Upgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-test-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade pgauditUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-private-libsUpgrade pgaudit-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-debuginfoUpgrade pg_repackUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-private-develUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-contrib | Mar 5, 2024 | Jun 9, 2023 |
| Suse | — | Upgrade postgresql15-testUpgrade postgresql14-serverUpgrade postgresql15-develUpgrade postgresql15-serverUpgrade postgresql13-server-develUpgrade postgresql15-server-develUpgrade postgresql12-server-develUpgrade postgresql12-pltclUpgrade postgresql13-contribUpgrade postgresql14-llvmjit-develUpgrade postgresql15-pltclUpgrade postgresql15-contribUpgrade postgresql14-docsUpgrade postgresql13-llvmjit-develUpgrade postgresql12-plpythonUpgrade postgresql12-llvmjit-develUpgrade postgresql15-plperlUpgrade postgresql12-plperlUpgrade libpq5Upgrade postgresql14-pltclUpgrade postgresql13-pltclUpgrade postgresql12-develUpgrade libecpg6Upgrade postgresql12Upgrade postgresql14-server-develUpgrade postgresql12-llvmjitUpgrade postgresql12-testUpgrade postgresql15-docsUpgrade postgresql14-testUpgrade postgresql14-plpythonUpgrade libecpg6-32bitUpgrade libpq5-32bitUpgrade postgresql13-plperlUpgrade postgresql13-llvmjitUpgrade postgresql14-plperlUpgrade postgresql14-develUpgrade postgresql15Upgrade postgresql13-docsUpgrade postgresql12-contribUpgrade postgresql15-llvmjitUpgrade postgresql13-serverUpgrade postgresql14Upgrade postgresql13Upgrade postgresql13-develUpgrade postgresql15-plpythonUpgrade postgresql14-llvmjitUpgrade postgresql13-plpythonUpgrade postgresql12-serverUpgrade postgresql15-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql12-docsUpgrade postgresql13-test | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade postgresql-client-15Upgrade postgresql-12Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-client-12Upgrade postgresql-15Upgrade postgresql-10Upgrade postgresql-client-10Upgrade postgresql-client-14 | May 25, 2023 | May 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub