A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pg_repackUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-private-libs | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql14Upgrade postgresql12Upgrade postgresql15 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-plpython2Upgrade postgresql-libsUpgrade postgresql-llvmjitUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-test | Jan 10, 2024 | Dec 10, 2023 |
| Amazon_linux | — | Upgrade postgresql92 | Feb 6, 2025 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-docsUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15Upgrade postgresql15-private-libsUpgrade postgresql15-server-develUpgrade postgresql15-test-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-testUpgrade postgresql15-upgrade-develUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-plperlUpgrade postgresql15-contribUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-server-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-pltcl | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-plpython | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-libs | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-contribUpgrade postgresql-staticUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgresql-plpythonUpgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade pg_repack | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 16.1 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgresql-staticUpgrade pg_repackUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade pgauditUpgrade postgresql-server-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-docsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-private-develNo solution existsUpgrade pg_repack-debuginfoUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-test-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsource | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade pg_repack-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade pgauditUpgrade postgresql-staticUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debugsource | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql12-pltclUpgrade postgresql13-llvmjit-develUpgrade postgresql13-serverUpgrade postgresql13-testUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql15-llvmjit-develUpgrade postgresql14-llvmjit-develUpgrade postgresql15-llvmjitUpgrade postgresql13-pltclUpgrade postgresql14-develUpgrade postgresql12-server-develUpgrade postgresql16-testUpgrade postgresql13-develUpgrade postgresql15-testUpgrade postgresql14-pltclUpgrade postgresql13Upgrade postgresql12-contribUpgrade postgresql12-plpythonUpgrade postgresql13-plperlUpgrade postgresql12-testUpgrade postgresql14-llvmjitUpgrade libecpg6-32bitUpgrade postgresql12-docsUpgrade postgresql12-llvmjitUpgrade postgresql12-serverUpgrade postgresql13-docsUpgrade postgresql14-plperlUpgrade postgresql14-serverUpgrade postgresql16-docsUpgrade postgresql15Upgrade postgresql15-plpythonUpgrade libpq5Upgrade postgresql14-contribUpgrade postgresql13-plpythonUpgrade postgresql16-plpythonUpgrade postgresql16-devel-miniUpgrade libecpg6Upgrade postgresqlUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql16-llvmjitUpgrade postgresql12Upgrade postgresql16Upgrade postgresql13-server-develUpgrade postgresql-pltclUpgrade postgresql16-server-develUpgrade postgresql16-serverUpgrade postgresql15-develUpgrade postgresql15-serverUpgrade postgresql14-server-develUpgrade postgresql-plpythonUpgrade postgresql16-pltclUpgrade postgresql14-testUpgrade postgresql16-develUpgrade postgresql15-server-develUpgrade postgresql15-pltclUpgrade postgresql15-docsUpgrade postgresql-develUpgrade postgresql12-develUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql14-plpythonUpgrade postgresql14Upgrade libpq5-32bitUpgrade postgresql15-contribUpgrade postgresql16-plperlUpgrade postgresql16-llvmjit-develUpgrade postgresql16-contribUpgrade postgresql15-plperlUpgrade postgresql12-plperlUpgrade postgresql12-llvmjit-develUpgrade postgresql-llvmjit-develUpgrade postgresql-llvmjitUpgrade postgresql14-docsUpgrade postgresql13-llvmjitUpgrade postgresql13-contrib | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-15Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-15Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-client-14Upgrade postgresql-client-12 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub