A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-server-develUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade postgresql | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql16Upgrade postgresql14Upgrade postgresql15 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpython2Upgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-llvmjitUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-private-devel | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-server-develUpgrade postgresql15-private-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15Upgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-testUpgrade postgresql15-test-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-upgrade-develUpgrade postgresql15-pltclUpgrade postgresql15-plperlUpgrade postgresql15-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-contribUpgrade postgresql15-server-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-serverUpgrade postgresql15-llvmjitUpgrade postgresql15-plperl-debuginfo | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pg_repack | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-develUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plperl | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-contrib | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to the latest version of PostgreSQLUpgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 14.10 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-private-develUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-server-debuginfoUpgrade pg_repackUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-serverUpgrade pgauditUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debugsourceNo solution existsUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debuginfo | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql-testUpgrade postgresql15-pltclUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql13-plperlUpgrade postgresql12-contribUpgrade postgresql14-serverUpgrade postgresql13-testUpgrade postgresql16-testUpgrade postgresql14-plperlUpgrade postgresql16-plpythonUpgrade postgresql14-develUpgrade postgresql14-llvmjitUpgrade postgresql15-llvmjit-develUpgrade postgresql13-serverUpgrade postgresql13-plpythonUpgrade postgresql12-llvmjitUpgrade libecpg6Upgrade postgresql13-docsUpgrade postgresql15Upgrade postgresql15-plpythonUpgrade postgresql13-develUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql16Upgrade postgresql12Upgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql16-devel-miniUpgrade postgresql16-pltclUpgrade postgresql12-server-develUpgrade postgresql12-plperlUpgrade postgresql12-serverUpgrade postgresql12-docsUpgrade postgresql13Upgrade postgresql16-plperlUpgrade postgresql15-serverUpgrade postgresql15-docsUpgrade postgresql14-llvmjit-develUpgrade postgresql-server-develUpgrade postgresql16-server-develUpgrade postgresql15-plperlUpgrade postgresql14-plpythonUpgrade postgresql13-pltclUpgrade postgresql16-llvmjit-develUpgrade postgresql15-server-develUpgrade postgresql12-pltclUpgrade postgresql-llvmjit-develUpgrade postgresql-contribUpgrade postgresql15-llvmjitUpgrade postgresql14-docsUpgrade postgresql14-server-develUpgrade postgresql12-testUpgrade postgresql12-llvmjit-develUpgrade postgresql16-docsUpgrade libpq5-32bitUpgrade postgresql13-llvmjitUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql14-testUpgrade postgresql13-contribUpgrade postgresql16-serverUpgrade postgresql12-plpythonUpgrade postgresql16-develUpgrade postgresql13-server-develUpgrade postgresql12-develUpgrade postgresql14-pltclUpgrade postgresql-llvmjitUpgrade postgresql15-contribUpgrade postgresql14-contribUpgrade postgresql-develUpgrade postgresql16-contribUpgrade postgresql15-develUpgrade postgresql13-llvmjit-develUpgrade postgresql14Upgrade postgresql16-llvmjitUpgrade postgresql15-test | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-client-14Upgrade postgresql-client-15Upgrade postgresql-15Upgrade postgresql-client-12 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub