A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-upgrade | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql16Upgrade postgresql15Upgrade postgresql14 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-llvmjitUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-plpython2Upgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-private-devel | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-upgrade-debuginfoUpgrade postgresql15Upgrade postgresql15-staticUpgrade postgresql15-private-libsUpgrade postgresql15-test-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-testUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-plperlUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-contribUpgrade postgresql15-server-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-plpython3 | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade pgauditUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-private-develUpgrade postgresql-plperl-debuginfoUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade pgaudit-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-pltcl-debuginfo | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-docs | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-contribUpgrade pg_repackUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-private-devel | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 16.1 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-staticUpgrade postgresql-contribUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade pgauditUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoNo solution existsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade pg_repack-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3-debuginfo | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-server-debuginfoUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-docs | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql12-contribUpgrade libpq5Upgrade postgresql13-plperlUpgrade postgresql16-devel-miniUpgrade libecpg6-32bitUpgrade libecpg6Upgrade postgresql15-llvmjit-develUpgrade postgresql-testUpgrade postgresql15-plpythonUpgrade postgresql16Upgrade postgresql16-plpythonUpgrade postgresql13-plpythonUpgrade postgresql12-llvmjitUpgrade postgresql14Upgrade postgresql15-pltclUpgrade postgresql15Upgrade postgresql13-serverUpgrade postgresql13-docsUpgrade postgresql12-docsUpgrade postgresql12Upgrade postgresql14-plperlUpgrade postgresql13-develUpgrade postgresql14-pltclUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql15-testUpgrade postgresql13-testUpgrade postgresql14-serverUpgrade postgresql14-llvmjitUpgrade postgresql-docsUpgrade postgresql14-develUpgrade postgresql16-testUpgrade postgresql16-llvmjitUpgrade postgresql-serverUpgrade postgresql13Upgrade postgresql16-docsUpgrade postgresql14-docsUpgrade postgresql13-llvmjitUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql16-pltclUpgrade postgresql16-plperlUpgrade postgresql12-plperlUpgrade postgresql12-server-develUpgrade postgresql12-develUpgrade postgresql15-llvmjitUpgrade postgresql14-server-develUpgrade postgresql15-develUpgrade postgresql-develUpgrade postgresql16-contribUpgrade postgresql16-develUpgrade postgresql15-serverUpgrade postgresql15-contribUpgrade postgresql12-serverUpgrade postgresql14-plpythonUpgrade postgresql13-pltclUpgrade postgresql-server-develUpgrade postgresql16-server-develUpgrade postgresql15-docsUpgrade postgresql14-llvmjit-develUpgrade postgresql15-plperlUpgrade postgresql12-pltclUpgrade postgresql-llvmjit-develUpgrade postgresql15-server-develUpgrade postgresql-contribUpgrade postgresql16-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql12-testUpgrade postgresql12-llvmjit-develUpgrade postgresql-llvmjitUpgrade postgresql14-testUpgrade postgresql14-contribUpgrade postgresql12-plpythonUpgrade postgresql13-contribUpgrade postgresql16-serverUpgrade postgresql13-server-develUpgrade postgresql13-llvmjit-devel | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-client-15Upgrade postgresql-client-14Upgrade postgresql-15Upgrade postgresql-client-12 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub