A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade pg_repack | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql16Upgrade postgresql14Upgrade postgresql12 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-llvmjitUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-plpython2Upgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libsUpgrade postgresql-plpythonUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-docs | Jan 10, 2024 | Dec 10, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | Feb 6, 2025 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-llvmjitUpgrade postgresql15-debugsourceUpgrade postgresql15-pltclUpgrade postgresql15-contribUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15Upgrade postgresql15-staticUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-testUpgrade postgresql15-test-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-private-libsUpgrade postgresql15-server-devel | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-debuginfo | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-libs | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-plpython3Upgrade postgresql-plpythonUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade pg_repackUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libsUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-server-devel | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 14.10 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresqlUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-libsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-server-develUpgrade postgresql-test-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade pg_repack-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-develUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-private-libsUpgrade postgresql-debugsourceUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperl-debuginfoNo solution existsUpgrade postgresql-upgrade-develUpgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-libs-debuginfo | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade pg_repackUpgrade postgresql-debugsourceUpgrade pg_repack-debugsourceUpgrade pgauditUpgrade postgresql-contrib-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-upgrade-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql13-serverUpgrade postgresql12-server-develUpgrade postgresql15Upgrade postgresql14-pltclUpgrade postgresql14-llvmjitUpgrade postgresql12-contribUpgrade postgresqlUpgrade postgresql16-testUpgrade postgresql-serverUpgrade postgresql14-develUpgrade postgresql13-pltclUpgrade postgresql14-plperlUpgrade postgresql15-testUpgrade postgresql12-plpythonUpgrade postgresql16-docsUpgrade postgresql12-llvmjitUpgrade postgresql-testUpgrade postgresql12-serverUpgrade postgresql13-docsUpgrade postgresql13-plpythonUpgrade postgresql14-contribUpgrade libecpg6Upgrade postgresql16-devel-miniUpgrade postgresql16-plpythonUpgrade libpq5Upgrade postgresql13-develUpgrade postgresql13-plperlUpgrade postgresql15-llvmjitUpgrade postgresql12-testUpgrade postgresql14-llvmjit-develUpgrade postgresql15-plpythonUpgrade postgresql14-serverUpgrade libecpg6-32bitUpgrade postgresql12-docsUpgrade postgresql15-llvmjit-develUpgrade postgresql-docsUpgrade postgresql13-llvmjit-develUpgrade postgresql12-pltclUpgrade postgresql13Upgrade postgresql13-testUpgrade postgresql15-docsUpgrade postgresql16-develUpgrade postgresql-develUpgrade postgresql15-server-develUpgrade postgresql14-testUpgrade postgresql16-pltclUpgrade postgresql15-pltclUpgrade postgresql16-server-develUpgrade postgresql16-serverUpgrade postgresql15-serverUpgrade postgresql14Upgrade postgresql12-develUpgrade postgresql15-plperlUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql16Upgrade postgresql13-server-develUpgrade postgresql-pltclUpgrade postgresql16-llvmjitUpgrade postgresql15-contribUpgrade postgresql-contribUpgrade postgresql14-docsUpgrade postgresql13-llvmjitUpgrade postgresql13-contribUpgrade postgresql12Upgrade postgresql-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql12-llvmjit-develUpgrade postgresql16-contribUpgrade postgresql12-plperlUpgrade postgresql16-llvmjit-develUpgrade postgresql-llvmjitUpgrade postgresql15-develUpgrade postgresql14-plpythonUpgrade postgresql16-plperlUpgrade postgresql14-server-develUpgrade postgresql-plpython | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-15Upgrade postgresql-14Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-client-12Upgrade postgresql-client-14Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-12 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub