schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-staticUpgrade pgauditUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-server-devel | Jun 27, 2023 | Jun 9, 2023 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql15Upgrade postgresql13Upgrade postgresql12Upgrade postgresql14 | Mar 26, 2024 | Jun 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpythonUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-plpython2Upgrade postgresql-develUpgrade postgresql-upgrade-develUpgrade postgresql-llvmjit | Sep 28, 2023 | Jun 9, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | May 13, 2025 | Jun 8, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-private-libsUpgrade postgresql15-plperlUpgrade postgresql15-llvmjitUpgrade postgresql15-staticUpgrade postgresql15-docsUpgrade postgresql15-pltclUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-plpython3Upgrade postgresql15-upgradeUpgrade postgresql15-upgrade-develUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-testUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15 | Feb 17, 2025 | May 11, 2023 |
| Centos_linux | — | Upgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade pgauditUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-private-develUpgrade pg_repackUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade pgaudit-debuginfoUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-contrib | Jun 22, 2023 | Jun 9, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | May 15, 2023 | May 15, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | May 11, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-test | Jan 10, 2024 | Jun 9, 2023 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-pltclUpgrade postgresql-private-devel | Jun 22, 2023 | May 11, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.8Upgrade to PostgreSQL version 15.3 | Jun 9, 2023 | Jun 9, 2023 |
| Redhat_linux | — | Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade pgaudit-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade pgaudit-debugsourceUpgrade postgresql-test-rpm-macrosNo solution existsUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-server-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-testUpgrade postgresql-private-develUpgrade postgresqlUpgrade pgauditUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade pg_repackUpgrade pg_repack-debugsourceUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs | Jun 22, 2023 | Jun 9, 2023 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade pgaudit-debuginfoUpgrade postgresql-debuginfoUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-private-develUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfo | Mar 5, 2024 | Jun 9, 2023 |
| Suse | — | Upgrade postgresql13-llvmjitUpgrade postgresql13-serverUpgrade postgresql14-develUpgrade postgresql12-serverUpgrade postgresql13-plpythonUpgrade postgresql14-plperlUpgrade postgresql14-llvmjitUpgrade postgresql15Upgrade postgresql15-llvmjit-develUpgrade postgresql14-plpythonUpgrade postgresql12-contribUpgrade postgresql15-llvmjitUpgrade postgresql13-docsUpgrade postgresql12-docsUpgrade libpq5-32bitUpgrade postgresql13-plperlUpgrade postgresql14Upgrade postgresql14-contribUpgrade postgresql13-develUpgrade postgresql13-testUpgrade postgresql13Upgrade libecpg6-32bitUpgrade postgresql15-plpythonUpgrade postgresql14-serverUpgrade postgresql12-llvmjitUpgrade postgresql12-server-develUpgrade postgresql15-docsUpgrade postgresql14-testUpgrade postgresql12-testUpgrade postgresql15-pltclUpgrade postgresql15-develUpgrade postgresql13-server-develUpgrade libecpg6Upgrade postgresql12-plperlUpgrade postgresql12-llvmjit-develUpgrade libpq5Upgrade postgresql12-develUpgrade postgresql12-plpythonUpgrade postgresql15-plperlUpgrade postgresql13-pltclUpgrade postgresql15-server-develUpgrade postgresql15-contribUpgrade postgresql14-server-develUpgrade postgresql15-testUpgrade postgresql15-serverUpgrade postgresql14-pltclUpgrade postgresql14-llvmjit-develUpgrade postgresql13-llvmjit-develUpgrade postgresql12-pltclUpgrade postgresql14-docsUpgrade postgresql13-contribUpgrade postgresql12 | May 16, 2023 | May 15, 2023 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-client-10Upgrade postgresql-client-14Upgrade postgresql-15Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-client-12Upgrade postgresql-14Upgrade postgresql-client-15Upgrade postgresql-12Upgrade postgresql-client-9.5 (Ubuntu Pro) | May 25, 2023 | May 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub