A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pg_repackUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade postgresql-upgrade-develUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade pgaudit | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresql12Upgrade postgresql16 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-private-libsUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-server | Jan 10, 2024 | Dec 10, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | Feb 6, 2025 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-upgrade-develUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-upgradeUpgrade postgresql15-testUpgrade postgresql15-server-develUpgrade postgresql15-docsUpgrade postgresql15-test-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15Upgrade postgresql15-private-develUpgrade postgresql15-llvmjitUpgrade postgresql15-server-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-serverUpgrade postgresql15-pltclUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-contribUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-private-libs-debuginfo | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-debuginfo | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-plpython | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-private-develUpgrade postgresql-plpythonUpgrade pg_repackUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-private-libsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-libs | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 11.22Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 13.13Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 12.17 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade pg_repackUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-plperl-debuginfoNo solution existsUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresqlUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-testUpgrade postgresql-plpython3-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-debugsourceUpgrade pg_repackUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresqlUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgresql-upgradeUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3Upgrade pgaudit-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plperl | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql14-pltclUpgrade postgresql12-docsUpgrade postgresql15Upgrade postgresql14-serverUpgrade postgresql15-plpythonUpgrade libecpg6Upgrade postgresql14-develUpgrade postgresql-testUpgrade postgresql15-testUpgrade postgresqlUpgrade postgresql12-testUpgrade postgresql15-llvmjitUpgrade postgresql13-testUpgrade postgresql13-plperlUpgrade postgresql12-pltclUpgrade postgresql-docsUpgrade postgresql13-pltclUpgrade postgresql13-serverUpgrade postgresql13-plpythonUpgrade postgresql14-contribUpgrade postgresql-serverUpgrade postgresql16-devel-miniUpgrade postgresql13-llvmjit-develUpgrade postgresql16-plpythonUpgrade libpq5Upgrade postgresql13Upgrade postgresql13-docsUpgrade postgresql14-plperlUpgrade postgresql12-serverUpgrade postgresql16-docsUpgrade postgresql12-llvmjitUpgrade libecpg6-32bitUpgrade postgresql15-llvmjit-develUpgrade postgresql14-llvmjitUpgrade postgresql12-plpythonUpgrade postgresql13-develUpgrade postgresql14-llvmjit-develUpgrade postgresql16-testUpgrade postgresql12-server-develUpgrade postgresql12-contribUpgrade postgresql16Upgrade postgresql12Upgrade postgresql15-serverUpgrade postgresql-develUpgrade postgresql12-llvmjit-develUpgrade postgresql12-plperlUpgrade postgresql-plperlUpgrade postgresql16-contribUpgrade postgresql15-docsUpgrade postgresql-llvmjitUpgrade postgresql15-develUpgrade postgresql16-server-develUpgrade postgresql16-serverUpgrade postgresql16-plperlUpgrade postgresql-contribUpgrade postgresql13-contribUpgrade postgresql14-docsUpgrade postgresql13-llvmjitUpgrade postgresql-server-develUpgrade postgresql14-plpythonUpgrade postgresql15-contribUpgrade postgresql-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql14Upgrade postgresql-plpythonUpgrade postgresql14-server-develUpgrade postgresql13-server-develUpgrade postgresql16-llvmjitUpgrade postgresql-pltclUpgrade postgresql16-llvmjit-develUpgrade postgresql15-plperlUpgrade postgresql12-develUpgrade postgresql15-pltclUpgrade postgresql14-testUpgrade postgresql16-pltclUpgrade postgresql16-develUpgrade postgresql15-server-devel | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-client-15Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-client-14Upgrade postgresql-client-12 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub