Red Hat Security Advisory

RHSA-2023:7771

rh-postgresql10-postgresql security update

Released 2023-12-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql10-postgresql-10.23-2.el7, rh-postgresql10-postgresql-contrib-10.23-2.el7, rh-postgresql10-postgresql-contrib-syspaths-10.23-2.el7 +11
Red Hat Software Collections for RHEL(v. 7) rh-postgresql10-postgresql-10.23-2.el7, rh-postgresql10-postgresql-contrib-10.23-2.el7, rh-postgresql10-postgresql-contrib-syspaths-10.23-2.el7 +11

Fixes 1 record

TI-2023-05404 CVE-2023-5869 · GHSA-9625-p7pg-3cxg

Postgresql: buffer overrun from integer overflow in array modification

MEDIUM 47

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04322 Published 2023-12-10 Partial fix · 4.2.4-6, 4.2.4-7 +29 CWE-190