A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-contrib | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresql12Upgrade postgresql16 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgresql-llvmjitUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-plpython2Upgrade postgresqlUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-private-develUpgrade postgresql-static | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-testUpgrade postgresql15-upgradeUpgrade postgresql15-server-develUpgrade postgresql15-private-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15Upgrade postgresql15-private-libsUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-plperlUpgrade postgresql15-pltclUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-debugsourceUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-llvmjitUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-docsUpgrade postgresql15-server-debuginfo | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-pltclUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-docsUpgrade pg_repackUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-private-develUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfo | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperl | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-contribUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 14.10 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-test-debuginfoUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufs-debugsourceNo solution existsUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-pltclUpgrade pgaudit-debugsource | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-plpython3-debuginfoUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-contribUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-serverUpgrade postgresql-test | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresqlUpgrade postgresql12Upgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql13-testUpgrade libecpg6Upgrade postgresql15-testUpgrade postgresql-plperlUpgrade postgresql16Upgrade postgresql16-plpythonUpgrade postgresql13-plpythonUpgrade postgresql14-serverUpgrade postgresql16-testUpgrade postgresql12-docsUpgrade postgresql13-docsUpgrade postgresql13-serverUpgrade postgresql14-pltclUpgrade postgresql15-plpythonUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql14-plperlUpgrade postgresql13-develUpgrade postgresql13Upgrade postgresql14-develUpgrade postgresql15-pltclUpgrade postgresql12-llvmjitUpgrade postgresql16-llvmjitUpgrade postgresql14Upgrade postgresql-testUpgrade postgresql15Upgrade postgresql15-llvmjit-develUpgrade postgresql14-llvmjitUpgrade postgresql16-devel-miniUpgrade postgresql12-contribUpgrade postgresql13-plperlUpgrade postgresql15-server-develUpgrade postgresql-server-develUpgrade postgresql16-server-develUpgrade postgresql13-pltclUpgrade postgresql15-plperlUpgrade postgresql15-docsUpgrade postgresql14-plpythonUpgrade postgresql14-llvmjit-develUpgrade postgresql14-testUpgrade postgresql13-contribUpgrade postgresql12-plpythonUpgrade postgresql16-serverUpgrade postgresql14-contribUpgrade postgresql15-contribUpgrade postgresql-llvmjitUpgrade postgresql15-serverUpgrade postgresql-pltclUpgrade postgresql14-server-develUpgrade postgresql15-llvmjitUpgrade postgresql13-llvmjitUpgrade postgresql12-serverUpgrade postgresql-plpythonUpgrade postgresql14-docsUpgrade postgresql13-server-develUpgrade postgresql13-llvmjit-develUpgrade postgresql15-develUpgrade postgresql-develUpgrade postgresql16-develUpgrade postgresql16-contribUpgrade postgresql-contribUpgrade postgresql16-llvmjit-develUpgrade postgresql12-pltclUpgrade postgresql-llvmjit-develUpgrade postgresql12-plperlUpgrade postgresql16-pltclUpgrade postgresql16-plperlUpgrade postgresql12-develUpgrade postgresql12-server-develUpgrade postgresql12-testUpgrade postgresql12-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql16-docs | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-client-14Upgrade postgresql-client-15Upgrade postgresql-client-12 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub