A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-test-rpm-macros | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresql12Upgrade postgresql16 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-private-libsUpgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresql-plpython2Upgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-pltcl | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-docsUpgrade postgresql15-server-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15-plpython3Upgrade postgresql15-llvmjitUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-testUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-staticUpgrade postgresql15Upgrade postgresql15-server-develUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-private-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-test-rpm-macros | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-server-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade pgaudit-debuginfoUpgrade postgresql-testUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-develUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-docsUpgrade pg_repackUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-upgrade-debuginfo | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-plpython | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-private-develUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-staticUpgrade pg_repackUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-plpython3 | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 15.5 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-server-debuginfoUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade pgauditUpgrade pg_repackUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debuginfoNo solution existsUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfo | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade pgauditUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debugsourceUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-pltcl | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql13-docsUpgrade postgresqlUpgrade postgresql15-testUpgrade postgresql16-llvmjitUpgrade postgresql-testUpgrade postgresql12Upgrade postgresql14Upgrade postgresql-serverUpgrade postgresql16-devel-miniUpgrade postgresql15Upgrade postgresql14-pltclUpgrade postgresql15-pltclUpgrade postgresql-plperlUpgrade postgresql12-docsUpgrade postgresql14-develUpgrade postgresql15-llvmjit-develUpgrade postgresql13Upgrade postgresql13-serverUpgrade postgresql16-plpythonUpgrade libecpg6Upgrade postgresql15-plpythonUpgrade postgresql16Upgrade postgresql13-develUpgrade postgresql12-llvmjitUpgrade postgresql-docsUpgrade postgresql13-plperlUpgrade postgresql14-plperlUpgrade postgresql13-plpythonUpgrade postgresql14-llvmjitUpgrade postgresql14-serverUpgrade postgresql16-testUpgrade postgresql13-testUpgrade postgresql12-contribUpgrade libecpg6-32bitUpgrade libpq5Upgrade postgresql15-contribUpgrade postgresql14-testUpgrade postgresql12-server-develUpgrade postgresql15-llvmjitUpgrade postgresql-pltclUpgrade postgresql15-server-develUpgrade postgresql12-pltclUpgrade postgresql-llvmjit-develUpgrade postgresql-contribUpgrade postgresql16-llvmjit-develUpgrade postgresql12-plpythonUpgrade postgresql13-contribUpgrade postgresql16-serverUpgrade postgresql15-docsUpgrade postgresql16-server-develUpgrade postgresql15-plperlUpgrade postgresql-server-develUpgrade postgresql14-plpythonUpgrade postgresql14-llvmjit-develUpgrade postgresql13-pltclUpgrade postgresql12-testUpgrade libpq5-32bitUpgrade postgresql16-docsUpgrade postgresql12-llvmjit-develUpgrade postgresql14-contribUpgrade postgresql15-serverUpgrade postgresql12-serverUpgrade postgresql-llvmjitUpgrade postgresql16-contribUpgrade postgresql-develUpgrade postgresql16-develUpgrade postgresql15-develUpgrade postgresql13-llvmjit-develUpgrade postgresql13-server-develUpgrade postgresql16-pltclUpgrade postgresql16-plperlUpgrade postgresql12-plperlUpgrade postgresql12-develUpgrade postgresql13-llvmjitUpgrade postgresql14-server-develUpgrade postgresql14-docsUpgrade postgresql-plpython | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-client-15Upgrade postgresql-client-12Upgrade postgresql-15Upgrade postgresql-client-14 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub