A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-testUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-private-libs | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresql12Upgrade postgresql16 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-plpython2Upgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgresql-server-devel | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-private-develUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15Upgrade postgresql15-contrib-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-staticUpgrade postgresql15-test-debuginfoUpgrade postgresql15-testUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-contribUpgrade postgresql15-server-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-plpython3Upgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-pltclUpgrade postgresql15-upgrade-develUpgrade postgresql15-docsUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-upgrade-devel-debuginfo | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade pg_repack-debugsourceUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-docsUpgrade pg_repackUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-private-develUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debuginfo | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-pltcl | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade pg_repackUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3 | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 13.13Upgrade to PostgreSQL version 11.22Upgrade to PostgreSQL version 12.17 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-libsNo solution existsUpgrade pg_repack-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade pg_repackUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade postgresql-staticUpgrade postgresql-server-debuginfo | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql-llvmjitUpgrade postgresql12-serverUpgrade postgresql14-contribUpgrade postgresql15-contribUpgrade postgresql12-pltclUpgrade postgresql-llvmjit-develUpgrade postgresql-contribUpgrade postgresql15-server-develUpgrade libpq5-32bitUpgrade postgresql12-llvmjit-develUpgrade postgresql16-contribUpgrade postgresql12-testUpgrade postgresql-develUpgrade postgresql13-server-develUpgrade postgresql16-develUpgrade postgresql16-docsUpgrade postgresql13-pltclUpgrade postgresql14-llvmjit-develUpgrade postgresql-server-develUpgrade postgresql15-docsUpgrade postgresql15-plperlUpgrade postgresql16-llvmjit-develUpgrade postgresql12-develUpgrade postgresql12-plperlUpgrade postgresql16-pltclUpgrade postgresql14-plpythonUpgrade postgresql14-testUpgrade postgresql12-server-develUpgrade postgresql16-plperlUpgrade postgresql13-llvmjit-develUpgrade postgresql15-llvmjitUpgrade postgresql-pltclUpgrade postgresql14-server-develUpgrade postgresql13-llvmjitUpgrade postgresql12-plpythonUpgrade postgresql16-serverUpgrade postgresql14-docsUpgrade postgresql-plpythonUpgrade postgresql15-serverUpgrade postgresql16-server-develUpgrade postgresql13-contribUpgrade postgresql15-develUpgrade libpq5Upgrade postgresql14-pltclUpgrade postgresql-testUpgrade postgresql15-llvmjit-develUpgrade postgresqlUpgrade postgresql13Upgrade postgresql12Upgrade postgresql15-testUpgrade postgresql-serverUpgrade postgresql12-contribUpgrade postgresql13-plperlUpgrade libecpg6-32bitUpgrade postgresql14Upgrade postgresql16-llvmjitUpgrade postgresql16Upgrade postgresql15-plpythonUpgrade postgresql13-plpythonUpgrade libecpg6Upgrade postgresql16-plpythonUpgrade postgresql14-plperlUpgrade postgresql-plperlUpgrade postgresql13-serverUpgrade postgresql16-devel-miniUpgrade postgresql13-docsUpgrade postgresql12-llvmjitUpgrade postgresql12-docsUpgrade postgresql15-pltclUpgrade postgresql15Upgrade postgresql16-testUpgrade postgresql14-llvmjitUpgrade postgresql14-serverUpgrade postgresql13-testUpgrade postgresql-docsUpgrade postgresql14-develUpgrade postgresql13-devel | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-client-14Upgrade postgresql-client-12Upgrade postgresql-client-15Upgrade postgresql-15 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub