Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects only databases that have used CREATE POLICY to define a row security policy.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-pg_repackalma-upgrade-pgauditalma-upgrade-postgres-decoderbufsalma-upgrade-postgresqlalma-upgrade-postgresql-contribalma-upgrade-postgresql-docsalma-upgrade-postgresql-plperlalma-upgrade-postgresql-plpython3alma-upgrade-postgresql-pltclalma-upgrade-postgresql-private-develalma-upgrade-postgresql-private-libsalma-upgrade-postgresql-serveralma-upgrade-postgresql-server-develalma-upgrade-postgresql-staticalma-upgrade-postgresql-testalma-upgrade-postgresql-test-rpm-macrosalma-upgrade-postgresql-upgradealma-upgrade-postgresql-upgrade-devel | Jun 27, 2023 | Jun 9, 2023 | |
| Alpine Linux | alpine-linux-upgrade-postgresqlalpine-linux-upgrade-postgresql13alpine-linux-upgrade-postgresql14alpine-linux-upgrade-postgresql12alpine-linux-upgrade-postgresql15 | Mar 26, 2024 | Jun 9, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-postgresqlamazon-linux-ami-2-upgrade-postgresql-contribamazon-linux-ami-2-upgrade-postgresql-debuginfoamazon-linux-ami-2-upgrade-postgresql-develamazon-linux-ami-2-upgrade-postgresql-docsamazon-linux-ami-2-upgrade-postgresql-libsamazon-linux-ami-2-upgrade-postgresql-llvmjitamazon-linux-ami-2-upgrade-postgresql-plperlamazon-linux-ami-2-upgrade-postgresql-plpythonamazon-linux-ami-2-upgrade-postgresql-plpython2amazon-linux-ami-2-upgrade-postgresql-plpython3amazon-linux-ami-2-upgrade-postgresql-pltclamazon-linux-ami-2-upgrade-postgresql-private-develamazon-linux-ami-2-upgrade-postgresql-private-libsamazon-linux-ami-2-upgrade-postgresql-serveramazon-linux-ami-2-upgrade-postgresql-server-develamazon-linux-ami-2-upgrade-postgresql-staticamazon-linux-ami-2-upgrade-postgresql-testamazon-linux-ami-2-upgrade-postgresql-test-rpm-macrosamazon-linux-ami-2-upgrade-postgresql-upgradeamazon-linux-ami-2-upgrade-postgresql-upgrade-devel | Sep 28, 2023 | Jun 9, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-postgresql15amazon-linux-2023-upgrade-postgresql15-contribamazon-linux-2023-upgrade-postgresql15-contrib-debuginfoamazon-linux-2023-upgrade-postgresql15-debuginfoamazon-linux-2023-upgrade-postgresql15-debugsourceamazon-linux-2023-upgrade-postgresql15-docsamazon-linux-2023-upgrade-postgresql15-docs-debuginfoamazon-linux-2023-upgrade-postgresql15-llvmjitamazon-linux-2023-upgrade-postgresql15-llvmjit-debuginfoamazon-linux-2023-upgrade-postgresql15-plperlamazon-linux-2023-upgrade-postgresql15-plperl-debuginfoamazon-linux-2023-upgrade-postgresql15-plpython3amazon-linux-2023-upgrade-postgresql15-plpython3-debuginfoamazon-linux-2023-upgrade-postgresql15-pltclamazon-linux-2023-upgrade-postgresql15-pltcl-debuginfoamazon-linux-2023-upgrade-postgresql15-private-develamazon-linux-2023-upgrade-postgresql15-private-libsamazon-linux-2023-upgrade-postgresql15-private-libs-debuginfoamazon-linux-2023-upgrade-postgresql15-serveramazon-linux-2023-upgrade-postgresql15-server-debuginfoamazon-linux-2023-upgrade-postgresql15-server-develamazon-linux-2023-upgrade-postgresql15-server-devel-debuginfoamazon-linux-2023-upgrade-postgresql15-staticamazon-linux-2023-upgrade-postgresql15-testamazon-linux-2023-upgrade-postgresql15-test-debuginfoamazon-linux-2023-upgrade-postgresql15-test-rpm-macrosamazon-linux-2023-upgrade-postgresql15-upgradeamazon-linux-2023-upgrade-postgresql15-upgrade-debuginfoamazon-linux-2023-upgrade-postgresql15-upgrade-develamazon-linux-2023-upgrade-postgresql15-upgrade-devel-debuginfo | Feb 17, 2025 | May 11, 2023 | |
| Centos_linux | — | centos-upgrade-pg_repackcentos-upgrade-pg_repack-debuginfocentos-upgrade-pg_repack-debugsourcecentos-upgrade-pgauditcentos-upgrade-pgaudit-debuginfocentos-upgrade-pgaudit-debugsourcecentos-upgrade-postgres-decoderbufscentos-upgrade-postgres-decoderbufs-debuginfocentos-upgrade-postgres-decoderbufs-debugsourcecentos-upgrade-postgresqlcentos-upgrade-postgresql-contribcentos-upgrade-postgresql-contrib-debuginfocentos-upgrade-postgresql-debuginfocentos-upgrade-postgresql-debugsourcecentos-upgrade-postgresql-docscentos-upgrade-postgresql-docs-debuginfocentos-upgrade-postgresql-plperlcentos-upgrade-postgresql-plperl-debuginfocentos-upgrade-postgresql-plpython3centos-upgrade-postgresql-plpython3-debuginfocentos-upgrade-postgresql-pltclcentos-upgrade-postgresql-pltcl-debuginfocentos-upgrade-postgresql-private-develcentos-upgrade-postgresql-private-libscentos-upgrade-postgresql-private-libs-debuginfocentos-upgrade-postgresql-servercentos-upgrade-postgresql-server-debuginfocentos-upgrade-postgresql-server-develcentos-upgrade-postgresql-server-devel-debuginfocentos-upgrade-postgresql-staticcentos-upgrade-postgresql-testcentos-upgrade-postgresql-test-debuginfocentos-upgrade-postgresql-test-rpm-macroscentos-upgrade-postgresql-upgradecentos-upgrade-postgresql-upgrade-debuginfocentos-upgrade-postgresql-upgrade-develcentos-upgrade-postgresql-upgrade-devel-debuginfo | Jun 22, 2023 | Jun 9, 2023 |
| Debian | debian-upgrade-postgresql-13debian-upgrade-postgresql-15 | May 15, 2023 | May 15, 2023 | |
| Dell Powerstore Dsa2023366 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Oct 5, 2023 | |
| Freebsd | freebsd-upgrade-package-postgresql-server | Dec 10, 2025 | May 11, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-postgresqlhuawei-euleros-2_0_sp8-upgrade-postgresql-contribhuawei-euleros-2_0_sp8-upgrade-postgresql-develhuawei-euleros-2_0_sp8-upgrade-postgresql-docshuawei-euleros-2_0_sp8-upgrade-postgresql-libshuawei-euleros-2_0_sp8-upgrade-postgresql-plperlhuawei-euleros-2_0_sp8-upgrade-postgresql-plpythonhuawei-euleros-2_0_sp8-upgrade-postgresql-pltclhuawei-euleros-2_0_sp8-upgrade-postgresql-serverhuawei-euleros-2_0_sp8-upgrade-postgresql-test | Jan 10, 2024 | Jun 9, 2023 | |
| Oracle_linux | oracle-linux-upgrade-pgauditoracle-linux-upgrade-pg-repackoracle-linux-upgrade-postgres-decoderbufsoracle-linux-upgrade-postgresqloracle-linux-upgrade-postgresql-contriboracle-linux-upgrade-postgresql-docsoracle-linux-upgrade-postgresql-plperloracle-linux-upgrade-postgresql-plpython3oracle-linux-upgrade-postgresql-pltcloracle-linux-upgrade-postgresql-private-develoracle-linux-upgrade-postgresql-private-libsoracle-linux-upgrade-postgresql-serveroracle-linux-upgrade-postgresql-server-develoracle-linux-upgrade-postgresql-staticoracle-linux-upgrade-postgresql-testoracle-linux-upgrade-postgresql-test-rpm-macrosoracle-linux-upgrade-postgresql-upgradeoracle-linux-upgrade-postgresql-upgrade-devel | Jun 22, 2023 | May 11, 2023 | |
| Postgres | postgres-upgrade-14_8postgres-upgrade-15_3postgres-upgrade-latest | Jun 9, 2023 | Jun 9, 2023 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-pg_repackredhat-upgrade-pg_repack-debuginforedhat-upgrade-pg_repack-debugsourceredhat-upgrade-pgauditredhat-upgrade-pgaudit-debuginforedhat-upgrade-pgaudit-debugsourceredhat-upgrade-postgres-decoderbufsredhat-upgrade-postgres-decoderbufs-debuginforedhat-upgrade-postgres-decoderbufs-debugsourceredhat-upgrade-postgresqlredhat-upgrade-postgresql-contribredhat-upgrade-postgresql-contrib-debuginforedhat-upgrade-postgresql-debuginforedhat-upgrade-postgresql-debugsourceredhat-upgrade-postgresql-docsredhat-upgrade-postgresql-docs-debuginforedhat-upgrade-postgresql-plperlredhat-upgrade-postgresql-plperl-debuginforedhat-upgrade-postgresql-plpython3redhat-upgrade-postgresql-plpython3-debuginforedhat-upgrade-postgresql-pltclredhat-upgrade-postgresql-pltcl-debuginforedhat-upgrade-postgresql-private-develredhat-upgrade-postgresql-private-libsredhat-upgrade-postgresql-private-libs-debuginforedhat-upgrade-postgresql-serverredhat-upgrade-postgresql-server-debuginforedhat-upgrade-postgresql-server-develredhat-upgrade-postgresql-server-devel-debuginforedhat-upgrade-postgresql-staticredhat-upgrade-postgresql-testredhat-upgrade-postgresql-test-debuginforedhat-upgrade-postgresql-test-rpm-macrosredhat-upgrade-postgresql-upgraderedhat-upgrade-postgresql-upgrade-debuginforedhat-upgrade-postgresql-upgrade-develredhat-upgrade-postgresql-upgrade-devel-debuginfo | Jun 22, 2023 | Jun 9, 2023 | |
| Rocky_linux | rocky-upgrade-pg_repackrocky-upgrade-pg_repack-debuginforocky-upgrade-pg_repack-debugsourcerocky-upgrade-pgauditrocky-upgrade-pgaudit-debuginforocky-upgrade-pgaudit-debugsourcerocky-upgrade-postgres-decoderbufsrocky-upgrade-postgres-decoderbufs-debuginforocky-upgrade-postgres-decoderbufs-debugsourcerocky-upgrade-postgresqlrocky-upgrade-postgresql-contribrocky-upgrade-postgresql-contrib-debuginforocky-upgrade-postgresql-debuginforocky-upgrade-postgresql-debugsourcerocky-upgrade-postgresql-docsrocky-upgrade-postgresql-docs-debuginforocky-upgrade-postgresql-plperlrocky-upgrade-postgresql-plperl-debuginforocky-upgrade-postgresql-plpython3rocky-upgrade-postgresql-plpython3-debuginforocky-upgrade-postgresql-pltclrocky-upgrade-postgresql-pltcl-debuginforocky-upgrade-postgresql-private-develrocky-upgrade-postgresql-private-libsrocky-upgrade-postgresql-private-libs-debuginforocky-upgrade-postgresql-serverrocky-upgrade-postgresql-server-debuginforocky-upgrade-postgresql-server-develrocky-upgrade-postgresql-server-devel-debuginforocky-upgrade-postgresql-staticrocky-upgrade-postgresql-testrocky-upgrade-postgresql-test-debuginforocky-upgrade-postgresql-test-rpm-macrosrocky-upgrade-postgresql-upgraderocky-upgrade-postgresql-upgrade-debuginforocky-upgrade-postgresql-upgrade-develrocky-upgrade-postgresql-upgrade-devel-debuginfo | Mar 5, 2024 | Jun 9, 2023 | |
| Suse | — | suse-upgrade-libecpg6suse-upgrade-libecpg6-32bitsuse-upgrade-libpq5suse-upgrade-libpq5-32bitsuse-upgrade-postgresql12suse-upgrade-postgresql12-contribsuse-upgrade-postgresql12-develsuse-upgrade-postgresql12-docssuse-upgrade-postgresql12-llvmjitsuse-upgrade-postgresql12-llvmjit-develsuse-upgrade-postgresql12-plperlsuse-upgrade-postgresql12-plpythonsuse-upgrade-postgresql12-pltclsuse-upgrade-postgresql12-serversuse-upgrade-postgresql12-server-develsuse-upgrade-postgresql12-testsuse-upgrade-postgresql13suse-upgrade-postgresql13-contribsuse-upgrade-postgresql13-develsuse-upgrade-postgresql13-docssuse-upgrade-postgresql13-llvmjitsuse-upgrade-postgresql13-llvmjit-develsuse-upgrade-postgresql13-plperlsuse-upgrade-postgresql13-plpythonsuse-upgrade-postgresql13-pltclsuse-upgrade-postgresql13-serversuse-upgrade-postgresql13-server-develsuse-upgrade-postgresql13-testsuse-upgrade-postgresql14suse-upgrade-postgresql14-contribsuse-upgrade-postgresql14-develsuse-upgrade-postgresql14-docssuse-upgrade-postgresql14-llvmjitsuse-upgrade-postgresql14-llvmjit-develsuse-upgrade-postgresql14-plperlsuse-upgrade-postgresql14-plpythonsuse-upgrade-postgresql14-pltclsuse-upgrade-postgresql14-serversuse-upgrade-postgresql14-server-develsuse-upgrade-postgresql14-testsuse-upgrade-postgresql15suse-upgrade-postgresql15-contribsuse-upgrade-postgresql15-develsuse-upgrade-postgresql15-docssuse-upgrade-postgresql15-llvmjitsuse-upgrade-postgresql15-llvmjit-develsuse-upgrade-postgresql15-plperlsuse-upgrade-postgresql15-plpythonsuse-upgrade-postgresql15-pltclsuse-upgrade-postgresql15-serversuse-upgrade-postgresql15-server-develsuse-upgrade-postgresql15-test | May 16, 2023 | May 15, 2023 |
| Ubuntu | ubuntu-upgrade-postgresql-10ubuntu-upgrade-postgresql-12ubuntu-upgrade-postgresql-14ubuntu-upgrade-postgresql-15ubuntu-upgrade-postgresql-client-10ubuntu-upgrade-postgresql-client-12ubuntu-upgrade-postgresql-client-14ubuntu-upgrade-postgresql-client-15 | May 25, 2023 | May 24, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub