Read the docs
TI-2023-02306 Aliases CVE-2023-2454GHSA-9fff-w5w3-5x9g

Improper input validation in postgresql

Priority LOW 36CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 14 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01199 68th percentileScored 2026-11-07
Fix Partial Red Hat: 14 advisoriesRed Hat: 14 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—postgresqlPostgreSQL 15.3, PostgreSQL 14.8, PostgreSQL 13.11, PostgreSQL 12.15, PostgreSQL 11.20—No fix listedCNA
  • postgresql Vendor— Affected PostgreSQL 15.3, PostgreSQL 14.8, PostgreSQL 13.11, PostgreSQL 12.15, PostgreSQL 11.20 Fixed in — No fix listed CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*11.0 to before 11.20; 12.0 to before 12.15; 13.0 to before 13.11; 14.0 to before 14.8; 15.0 to before 15.3VulnerablePostgreSQL
cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* Versions 11.0 to before 11.20; 12.0 to before 12.15; 13.0 to before 13.11; 14.0 to before 14.8; 15.0 to before 15.3 Vulnerable ·PostgreSQL
  • cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject

Remediation

Red Hat 14 advisories

  • RHSA-2023:7772 Released 2023-12-13 · Red Hat rating Important
    rh-postgresql13-postgresql security update
    • Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql13-postgresql-13.13-1.el7, rh-postgresql13-postgresql-contrib-13.13-1.el7, rh-postgresql13-postgresql-contrib-syspaths-13.13-1.el7 +12
    • Red Hat Software Collections for RHEL(v. 7) rh-postgresql13-postgresql-13.13-1.el7, rh-postgresql13-postgresql-contrib-13.13-1.el7, rh-postgresql13-postgresql-contrib-syspaths-13.13-1.el7 +12
  • RHSA-2023:7695 Released 2023-12-07 · Red Hat rating Important
    postgresql:13 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64::postgresql:13, postgres-decoderbufs-0.10.0-2.module+el8.4.0+8873+b821c30a.src::postgresql:13 +15
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.aarch64::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.ppc64le::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.s390x::postgresql:13 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64::postgresql:13, postgres-decoderbufs-0.10.0-2.module+el8.4.0+8873+b821c30a.src::postgresql:13 +15
  • RHSA-2023:7694 Released 2023-12-07 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.src::postgresql:12 +15
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.aarch64::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.ppc64le::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.s390x::postgresql:12 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.src::postgresql:12 +15
Show 11 more Red Hat advisories
  • RHSA-2023:7666 Released 2023-12-06 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12 +47
  • RHSA-2023:7667 Released 2023-12-06 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src::postgresql:12 +15
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.ppc64le::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12 +29
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src::postgresql:12 +15
  • RHSA-2023:7580 Released 2023-11-29 · Red Hat rating Important
    postgresql:13 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13 +47
  • RHSA-2023:7545 Released 2023-11-28 · Red Hat rating Important
    postgresql security update
    • Red Hat CodeReady Linux Builder EUS (v.9.0) postgresql-private-devel-13.13-1.el9_0, postgresql-server-devel-13.13-1.el9_0, postgresql-test-13.13-1.el9_0
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) postgresql-13.13-1.el9_0, postgresql-contrib-13.13-1.el9_0, postgresql-plperl-13.13-1.el9_0 +5
  • RHSA-2023:5269 Released 2023-09-19 · Red Hat rating Moderate
    postgresql:15 security update
    • Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.s390x::postgresql:15 +47
  • RHSA-2023:4539 Released 2023-08-08 · Red Hat rating Moderate
    postgresql:10 security update
    • Red Hat Enterprise Linux AppStream (v. 8) postgresql-10.23-2.module+el8.8.0+19493+5804baf6.aarch64::postgresql:10, postgresql-10.23-2.module+el8.8.0+19493+5804baf6.ppc64le::postgresql:10, postgresql-10.23-2.module+el8.8.0+19493+5804baf6.s390x::postgresql:10 +47
  • RHSA-2023:4527 Released 2023-08-08 · Red Hat rating Moderate
    postgresql:13 security update
    • Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13 +47
  • RHSA-2023:4535 Released 2023-08-08 · Red Hat rating Moderate
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12 +47
  • RHSA-2023:4327 Released 2023-07-31 · Red Hat rating Moderate
    postgresql:15 security update
    • Red Hat Enterprise Linux AppStream (v. 9) pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15 +47
  • RHSA-2023:4313 Released 2023-07-27 · Red Hat rating Moderate
    rh-postgresql12-postgresql security update
    • Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql12-postgresql-12.15-1.el7, rh-postgresql12-postgresql-contrib-12.15-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.15-1.el7 +11
    • Red Hat Software Collections for RHEL(v. 7) rh-postgresql12-postgresql-12.15-1.el7, rh-postgresql12-postgresql-contrib-12.15-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.15-1.el7 +11
  • RHSA-2023:3714 Released 2023-06-21 · Red Hat rating Moderate
    postgresql security update
    • Red Hat Enterprise Linux AppStream (v. 9) postgresql-13.11-1.el9_2, postgresql-contrib-13.11-1.el9_2, postgresql-plperl-13.11-1.el9_2 +5
    • Red Hat Enterprise Linux CRB (v. 9) postgresql-docs-13.11-1.el9_2, postgresql-private-devel-13.11-1.el9_2, postgresql-server-devel-13.11-1.el9_2 +3

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat CodeReady Linux Builder EUS (v.9.0)Fixed RHSA-2023:7545
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:4527, RHSA-2023:4535, RHSA-2023:4539, RHSA-2023:5269
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:3714, RHSA-2023:4327
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2023:7667
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2023:7694, RHSA-2023:7695
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2023:7667
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2023:7694, RHSA-2023:7695
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:7580, RHSA-2023:7666
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:7545
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2023:7667
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2023:7694, RHSA-2023:7695
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2023:3714
Red Hat Software Collections for RHEL Workstation(v. 7)Fixed RHSA-2023:4313, RHSA-2023:7772
Red Hat Software Collections for RHEL(v. 7)Fixed RHSA-2023:4313, RHSA-2023:7772
Not affected: 29 products
  • A-MQ Clients 2
  • Cryostat 2
  • Red Hat AMQ Broker 7
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Data Grid 8
  • Red Hat Decision Manager 7
  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Fuse 7
  • Red Hat Integration Camel K 1
  • Red Hat Integration Camel Quarkus 2
  • Red Hat JBoss Data Grid 7
  • Red Hat JBoss Enterprise Application Platform 6
  • Red Hat JBoss Enterprise Application Platform 7
  • Red Hat JBoss Enterprise Application Platform 8
  • Red Hat JBoss Enterprise Application Platform Expansion Pack
  • Red Hat JBoss Fuse 6
  • Red Hat JBoss Fuse Service Works 6
  • Red Hat OpenShift Application Runtimes
  • Red Hat OpenShift Container Platform 3.11
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Dev Spaces
  • Red Hat Process Automation 7
  • Red Hat Satellite 6
  • Red Hat Single Sign-On 7
  • Red Hat build of Apache Camel for Spring Boot 3
  • Red Hat build of Apicurio Registry 2
  • Red Hat build of Debezium 1
  • Red Hat build of OptaPlanner 8
  • Red Hat build of Quarkus

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-2454
  2. 2026-10-03 Alias added: GHSA-9fff-w5w3-5x9g

References

Advisory 2

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences