A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-testUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade pg_repack | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql12Upgrade postgresql14Upgrade postgresql15 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-debuginfoUpgrade postgresql-llvmjitUpgrade postgresql-libsUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2Upgrade postgresql-plperl | Jan 10, 2024 | Dec 10, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | Feb 6, 2025 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-plperlUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-private-libsUpgrade postgresql15-testUpgrade postgresql15-test-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15Upgrade postgresql15-staticUpgrade postgresql15-debugsourceUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-server-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-server | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-develUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-test | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-private-libsUpgrade postgresql-plpythonUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-upgrade-devel | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 14.10Upgrade to the latest version of PostgreSQLUpgrade to PostgreSQL version 15.5 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade pg_repack-debugsourceUpgrade pgauditUpgrade postgresql-private-libsUpgrade postgresql-debugsourceUpgrade postgresql-staticUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-devel-debuginfoNo solution existsUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repackUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-test-debuginfoUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pg_repack-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-libsUpgrade postgresql-upgrade | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-server-debuginfoUpgrade postgresql-staticUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade pg_repackUpgrade postgresql-test-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsource | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql12Upgrade postgresql16-pltclUpgrade postgresql15-pltclUpgrade postgresql13-contribUpgrade postgresql15-docsUpgrade postgresql16-develUpgrade postgresql15-server-develUpgrade postgresql12-plperlUpgrade postgresql16-server-develUpgrade postgresql-plpythonUpgrade postgresql14-server-develUpgrade postgresql-llvmjit-develUpgrade postgresql14-testUpgrade postgresql12-develUpgrade postgresql12-llvmjit-develUpgrade postgresql-pltclUpgrade postgresql16Upgrade postgresql15-develUpgrade postgresql15-contribUpgrade postgresql16-plperlUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql14-plpythonUpgrade postgresql13-llvmjitUpgrade postgresql14-docsUpgrade postgresql15-serverUpgrade postgresql12-server-develUpgrade postgresql15-llvmjitUpgrade postgresql14-develUpgrade postgresql16-testUpgrade postgresql14-llvmjit-develUpgrade postgresql13-plperlUpgrade postgresql13-pltclUpgrade postgresql13-serverUpgrade postgresql13-docsUpgrade postgresql12-serverUpgrade postgresql16-docsUpgrade postgresql13-develUpgrade postgresql14-plperlUpgrade postgresql12-llvmjitUpgrade postgresql12-testUpgrade postgresql12-plpythonUpgrade libecpg6-32bitUpgrade postgresql14-pltclUpgrade postgresql13-plpythonUpgrade postgresql-serverUpgrade libpq5Upgrade postgresql16-devel-miniUpgrade postgresql15-plpythonUpgrade postgresql15Upgrade postgresql14-serverUpgrade postgresql12-docsUpgrade postgresql12-contribUpgrade postgresql14-llvmjitUpgrade postgresql-testUpgrade postgresql15-testUpgrade postgresqlUpgrade libecpg6Upgrade postgresql13-testUpgrade postgresql12-pltclUpgrade postgresql-docsUpgrade postgresql13-llvmjit-develUpgrade postgresql15-llvmjit-develUpgrade postgresql13Upgrade postgresql16-plpythonUpgrade postgresql14-contrib | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-client-12Upgrade postgresql-12Upgrade postgresql-client-14Upgrade postgresql-15Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-client-15Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-9.5 (Ubuntu Pro) | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub