Postgresql: buffer overrun from integer overflow in array modification
Summary
| CVE | CVE-2023-5869 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-12-10 18:15:07 UTC |
| Updated | 2026-11-04 21:17:26 UTC |
| Description | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory. |
Risk And Classification
Primary CVSS: v3.1 8.8 HIGH from [email protected]
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types: CWE-190 | CWE-190 Integer Overflow or Wraparound
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | [email protected] | Secondary | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Postgresql | Postgresql | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Red Hat | Red Hat Advanced Cluster Security 4.2 | unaffected 4.2.4-6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Advanced Cluster Security 4.2 | unaffected 4.2.4-6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Advanced Cluster Security 4.2 | unaffected 4.2.4-7 * rpm | Not specified |
| CNA | Red Hat | Red Hat Advanced Cluster Security 4.2 | unaffected 4.2.4-6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Advanced Cluster Security 4.2 | unaffected 4.2.4-7 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | unaffected 0:9.2.24-9.el7_9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 8090020231114113712.a75119d5 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 8090020231128173330.a75119d5 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 8090020231201202407.a75119d5 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 8090020231114113548.a75119d5 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.1 Update Services For SAP Solutions | unaffected 8010020231130170510.c27ad7f8 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | unaffected 8020020231128165246.4cda2c84 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | unaffected 8020020231201202149.4cda2c84 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | unaffected 8020020231128165246.4cda2c84 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | unaffected 8020020231201202149.4cda2c84 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Update Services For SAP Solutions | unaffected 8020020231128165246.4cda2c84 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Update Services For SAP Solutions | unaffected 8020020231201202149.4cda2c84 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 8040020231127153301.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 8040020231127154806.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 8040020231127142440.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | unaffected 8040020231127153301.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | unaffected 8040020231127154806.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | unaffected 8040020231127142440.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Update Services For SAP Solutions | unaffected 8040020231127153301.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Update Services For SAP Solutions | unaffected 8040020231127154806.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Update Services For SAP Solutions | unaffected 8040020231127142440.522a0ee4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | unaffected 8060020231114115246.ad008a3a * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | unaffected 8060020231128165328.ad008a3a * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | unaffected 8060020231201202249.ad008a3a * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | unaffected 8080020231114105206.63b34585 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | unaffected 8080020231128165335.63b34585 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | unaffected 8080020231201202316.63b34585 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | unaffected 8080020231113134015.63b34585 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:13.13-1.el9_3 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 9030020231120082734.rhel9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | unaffected 0:13.13-1.el9_0 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 0:13.13-1.el9_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 9020020231115020618.rhel9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Software Collections For Red Hat Enterprise Linux 7 | unaffected 0:12.17-1.el7 * rpm | Not specified |
| CNA | Red Hat | Red Hat Software Collections For Red Hat Enterprise Linux 7 | unaffected 0:10.23-2.el7 * rpm | Not specified |
| CNA | Red Hat | Red Hat Software Collections For Red Hat Enterprise Linux 7 | unaffected 0:13.13-1.el7 * rpm | Not specified |
| CNA | Red Hat | RHACS-3.74-RHEL-8 | unaffected 3.74.8-9 * rpm | Not specified |
| CNA | Red Hat | RHACS-3.74-RHEL-8 | unaffected 3.74.8-9 * rpm | Not specified |
| CNA | Red Hat | RHACS-3.74-RHEL-8 | unaffected 3.74.8-7 * rpm | Not specified |
| CNA | Red Hat | RHACS-3.74-RHEL-8 | unaffected 3.74.8-9 * rpm | Not specified |
| CNA | Red Hat | RHACS-3.74-RHEL-8 | unaffected 3.74.8-9 * rpm | Not specified |
| CNA | Red Hat | RHACS-4.1-RHEL-8 | unaffected 4.1.6-6 * rpm | Not specified |
| CNA | Red Hat | RHACS-4.1-RHEL-8 | unaffected 4.1.6-6 * rpm | Not specified |
| CNA | Red Hat | RHACS-4.1-RHEL-8 | unaffected 4.1.6-6 * rpm | Not specified |
| CNA | Red Hat | RHACS-4.1-RHEL-8 | unaffected 4.1.6-6 * rpm | Not specified |
| CNA | Red Hat | RHACS-4.1-RHEL-8 | unaffected 4.1.6-6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 6 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| cve-details | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| 2247169 – (CVE-2023-5869) CVE-2023-5869 postgresql: Buffer overrun from integer overflow in array modification | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Issue Tracking |
| December 2023 PostgreSQL Vulnerabilities in NetApp Products | NetApp Product Security | af854a3a-2127-422b-91ae-364da2661108 | security.netapp.com | |
| PostgreSQL: PostgreSQL 16.1, 15.5, 14.10, 13.13, 12.17, and 11.22 Released! | af854a3a-2127-422b-91ae-364da2661108 | www.postgresql.org | Release Notes |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| PostgreSQL: CVE-2023-5869: Buffer overrun from integer overflow in array modification | af854a3a-2127-422b-91ae-364da2661108 | www.postgresql.org | Vendor Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| lists.debian.org/debian-lts-announce/2023/11/msg00007.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Upstream acknowledges Pedro Gallegos as the original reporter. (en)
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2023-10-31T00:00:00.000Z | Reported to Red Hat. |
| CNA | 2023-11-09T00:00:00.000Z | Made public. |
Workarounds
CNA: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.
Legacy QID Mappings
- 161207 Oracle Enterprise Linux Security Update for postgresql:13 (ELSA-2023-7581)
- 161224 Oracle Enterprise Linux Security Update for postgresql (ELSA-2023-7783)
- 161232 Oracle Enterprise Linux Security Update for postgresql:15 (ELSA-2023-7785)
- 161242 Oracle Enterprise Linux Security Update for postgresql (ELSA-2023-7784)
- 161250 Oracle Enterprise Linux Security Update for postgresql:12 (ELSA-2023-7714)
- 161252 Oracle Enterprise Linux Security Update for postgresql:10 (ELSA-2023-7790)
- 161253 Oracle Enterprise Linux Security Update for postgresql:15 (ELSA-2023-7884)
- 199981 Ubuntu Security Notification for PostgreSQL Vulnerability (USN-6538-1)
- 200053 Ubuntu Security Notification for PostgreSQL Vulnerabilities (USN-6538-2)
- 242527 Red Hat Update for postgresql (RHSA-2023:7545)
- 242534 Red Hat Update for postgresql:13 (RHSA-2023:7580)
- 242536 Red Hat Update for postgresql:13 (RHSA-2023:7581)
- 242537 Red Hat Update for postgresql:13 (RHSA-2023:7579)
- 242540 Red Hat Update for postgresql (RHSA-2023:7616)
- 242546 Red Hat Update for postgresql:12 (RHSA-2023:7666)
- 242547 Red Hat Update for postgresql:12 (RHSA-2023:7667)
- 242550 Red Hat Update for postgresql:13 (RHSA-2023:7695)
- 242552 Red Hat Update for postgresql:12 (RHSA-2023:7694)
- 242558 Red Hat Update for postgresql:12 (RHSA-2023:7714)
- 242590 Red Hat Update for rh-postgresql10-postgresql (RHSA-2023:7771)
- 242591 Red Hat Update for rh-postgresql12-postgresql (RHSA-2023:7770)
- 242592 Red Hat Update for rh-postgresql13-postgresql (RHSA-2023:7772)
- 242595 Red Hat Update for postgresql:10 (RHSA-2023:7778)
- 242598 Red Hat Update for postgresql:10 (RHSA-2023:7788)
- 242604 Red Hat Update for postgresql (RHSA-2023:7783)
- 242610 Red Hat Update for postgresql:10 (RHSA-2023:7786)
- 242611 Red Hat Update for postgresql (RHSA-2023:7784)
- 242614 Red Hat Update for postgresql:15 (RHSA-2023:7785)
- 242616 Red Hat Update for postgresql:10 (RHSA-2023:7790)
- 242624 Red Hat Update for postgresql:10 (RHSA-2023:7789)
- 242628 Red Hat Update for postgresql:10 (RHSA-2023:7878)
- 242634 Red Hat Update for postgresql:15 (RHSA-2023:7885)
- 242636 Red Hat Update for postgresql:15 (RHSA-2023:7883)
- 242657 Red Hat Update for postgresql:15 (RHSA-2023:7884)
- 257271 Centos Security Update for postgresql
- 257294 CentOS Security Update for postgresql (CESA-2023:7783)
- 357052 Amazon Linux Security Advisory for postgresql : ALAS2POSTGRESQL12-2024-007
- 357056 Amazon Linux Security Advisory for postgresql : ALAS2POSTGRESQL14-2024-004
- 357060 Amazon Linux Security Advisory for postgresql : ALAS2POSTGRESQL13-2024-005
- 357061 Amazon Linux Security Advisory for libpq : ALAS2POSTGRESQL14-2024-005
- 379115 Alibaba Cloud Linux Security Update for postgresql:13 (ALINUX3-SA-2023:0139)
- 379277 Alibaba Cloud Linux Security Update for postgresql (ALINUX2-SA-2023:0051)
- 503560 Alpine Linux Security Update for postgresql14
- 503561 Alpine Linux Security Update for postgresql12
- 503562 Alpine Linux Security Update for postgresql15
- 505921 Alpine Linux Security Update for postgresql15
- 505922 Alpine Linux Security Update for postgresql16
- 506164 Alpine Linux Security Update for postgresql14
- 6000321 Debian Security Update for postgresql-13 (DSA 5554-1)
- 6000322 Debian Security Update for postgresql-15 (DSA 5553-1)
- 6000323 Debian Security Update for postgresql-11 (DLA 3651-1)
- 673520 EulerOS Security Update for postgresql (EulerOS-SA-2024-1289)
- 691355 Free Berkeley Software Distribution (FreeBSD) Security Update for postgresql (0f445859-7f0e-11ee-94b4-6cc21735f730)
- 755251 SUSE Enterprise Linux Security Update for postgresql14 (SUSE-SU-2023:4418-1)
- 755253 SUSE Enterprise Linux Security Update for postgresql, postgresql15, postgresql16 (SUSE-SU-2023:4425-1)
- 755261 SUSE Enterprise Linux Security Update for postgresql13 (SUSE-SU-2023:4434-1)
- 755262 SUSE Enterprise Linux Security Update for postgresql12 (SUSE-SU-2023:4433-1)
- 755269 SUSE Enterprise Linux Security Update for postgresql13 (SUSE-SU-2023:4455-1)
- 755270 SUSE Enterprise Linux Security Update for postgresql12 (SUSE-SU-2023:4454-1)
- 755286 SUSE Enterprise Linux Security Update for postgresql14 (SUSE-SU-2023:4479-1)
- 755603 SUSE Enterprise Linux Security Update for postgresql, postgresql15, postgresql16 (SUSE-SU-2024:0106-1)
- 907725 Common Base Linux Mariner (CBL-Mariner) Security Update for postgresql (32104-1)
- 941485 AlmaLinux Security Update for postgresql:13 (ALSA-2023:7581)
- 941501 AlmaLinux Security Update for postgresql (ALSA-2023:7784)
- 941508 AlmaLinux Security Update for postgresql:12 (ALSA-2023:7714)
- 941509 AlmaLinux Security Update for postgresql:10 (ALSA-2023:7790)
- 941510 AlmaLinux Security Update for postgresql:15 (ALSA-2023:7785)
- 941512 AlmaLinux Security Update for postgresql:15 (ALSA-2023:7884)
- 961088 Rocky Linux Security Update for postgresql:13 (RLSA-2023:7581)