Red Hat Security Advisory

RHSA-2023:7545

postgresql security update

Released 2023-11-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.0) postgresql-private-devel-13.13-1.el9_0, postgresql-server-devel-13.13-1.el9_0, postgresql-test-13.13-1.el9_0
Red Hat Enterprise Linux AppStream EUS (v.9.0) postgresql-13.13-1.el9_0, postgresql-contrib-13.13-1.el9_0, postgresql-plperl-13.13-1.el9_0 +5

Fixes 8 records

TI-2023-05404 CVE-2023-5869 · GHSA-9625-p7pg-3cxg

Postgresql: buffer overrun from integer overflow in array modification

MEDIUM 47

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04322 Published 2023-12-10 Partial fix · 4.2.4-6, 4.2.4-7 +29 CWE-190

TI-2023-20556 CVE-2023-39417 · GHSA-jx3x-j983-74m3

Postgresql: extension script @substitutions@ within quoting allow sql injection

MEDIUM 43

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or "").

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01676 Published 2023-08-11 Partial fix · 4.2.4-6, 4.2.4-7 +21 CWE-89

TI-2022-02427 CVE-2022-2625 · GHSA-m7mv-m566-78j6

Mass assignment in postgresql

MEDIUM 41

A vulnerability was found in PostgreSQL.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.02154 Published 2022-08-18 Partial fix CWE-915

TI-2023-02306 CVE-2023-2454 · GHSA-9fff-w5w3-5x9g

Improper input validation in postgresql

LOW 36

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01199 Published 2023-06-09 Partial fix CWE-20

TI-2023-05403 CVE-2023-5868 · GHSA-3f9w-7983-qcmq

Postgresql: memory disclosure in aggregate function calls

LOW 31

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02775 Published 2023-12-10 Partial fix · 4.2.4-6, 4.2.4-7 +21 CWE-686

TI-2023-02307 CVE-2023-2455 · GHSA-r7p3-79xh-j7pg

Improper input validation in postgresql

LOW 26

Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.007 Published 2023-06-09 Partial fix CWE-20

TI-2023-05405 CVE-2023-5870 · GHSA-5gp7-j4r7-g66f

Postgresql: role pg_signal_backend can signal certain superuser processes.

LOW 25

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.02555 Published 2023-12-10 Partial fix · 4.2.4-6, 4.2.4-7 +21 CWE-400

TI-2022-20211 CVE-2022-41862 · GHSA-fr68-cm8v-7vv6

Information disclosure in postgresql

LOW 19

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00622 Published 2023-03-03 Partial fix CWE-200