Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMITRECVE-2023-5868
HistoryDec 10, 2023 - 5:56 p.m.

CVE-2023-5868

2023-12-1017:56:57
MITRE
web.nvd.nist.gov
251
postgresql
memory disclosure
vulnerability
remote access
aggregate function calls
nvd

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.9%

JSON

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with ‘unknown’-type arguments. Handling ‘unknown’-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.

References

Related

nessus 45
osv 11
cgr 1
cvelist 1
redhatcve 1
ibm 5
debiancve 1
veracode 1
ubuntucve 1
wolfi 1
prion 1
cbl_mariner 1
freebsd 1
alpinelinux 1
openvas 22
cloudfoundry 1
kaspersky 1
mageia 1
ubuntu 1
redos 4
redhat 21
oraclelinux 5
rocky 3
almalinux 5
photon 1
hp 1
nessus
nessus
FreeBSD : postgresql-server -- Memory disclosure in aggregate function calls (31f45d06-7f0e-11ee-94b4-6cc21735f730)
2023-11-09 00:00:00
Amazon Linux 2 : postgresql (ALASPOSTGRESQL13-2024-005)
2024-01-24 00:00:00
Amazon Linux 2 : postgresql (ALASPOSTGRESQL14-2024-004)
2024-01-24 00:00:00
osv
osv
BIT-postgresql-2023-5868
2024-03-06 11:02:52
CVE-2023-5868
2023-12-10 18:15:07
postgresql-10 vulnerabilities
2024-01-17 05:20:49
cgr
cgr
CVE-2023-5868 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2023-5868 Postgresql: memory disclosure in aggregate function calls
2023-12-10 17:56:57
redhatcve
redhatcve
CVE-2023-5868
2023-11-10 10:44:56
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to sensitive information exposure due to PostgreSQL (CVE-2023-5868)
2024-04-24 04:46:33
Security Bulletin: IBM Security Guardium is vulnerable to sensitive information disclosure (CVE-2023-5868)
2024-05-15 17:33:13
Security Bulletin: Vulnerabilities in PostgreSQL, Golang might affect IBM Spectrum Copy Data Management
2024-01-12 16:31:24
debiancve
debiancve
CVE-2023-5868
2023-12-10 17:56:57
veracode
veracode
Memory Disclosure
2023-11-27 21:07:19
ubuntucve
ubuntucve
CVE-2023-5868
2023-11-15 00:00:00
wolfi
wolfi
CVE-2023-5868 vulnerabilities
2024-06-02 22:01:16
prion
prion
Design/Logic Flaw
2023-12-10 18:15:00
cbl_mariner
cbl_mariner
CVE-2023-5868 affecting package postgresql for versions less than 14.10-1
2024-01-14 22:46:30
freebsd
freebsd
postgresql-server -- Memory disclosure in aggregate function calls
2023-11-09 00:00:00
alpinelinux
alpinelinux
CVE-2023-5868
2023-12-10 17:56:57
openvas
openvas
Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2024-1289)
2024-03-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4433-1)
2023-11-15 00:00:00
Mageia: Security Advisory (MGASA-2023-0324)
2023-11-22 00:00:00
cloudfoundry
cloudfoundry
USN-6538-1: PostgreSQL vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
kaspersky
kaspersky
KLA61933 Multiple vulnerabilities in PostgreSQL
2023-11-09 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerabilities
2023-11-22 04:49:25
ubuntu
ubuntu
PostgreSQL vulnerabilities
2024-01-17 00:00:00
redos
redos
ROS-20240329-13
2024-03-29 00:00:00
ROS-20240329-14
2024-03-29 00:00:00
ROS-20240329-11
2024-03-29 00:00:00
redhat
redhat
(RHSA-2023:7579) Important: postgresql:13 security update
2023-11-29 13:49:39
(RHSA-2023:7714) Important: postgresql:12 security update
2023-12-11 09:25:48
(RHSA-2023:7784) Important: postgresql security update
2023-12-13 14:48:22
oraclelinux
oraclelinux
postgresql:12 security update
2023-12-18 00:00:00
postgresql:13 security update
2023-11-30 00:00:00
postgresql security update
2023-12-15 00:00:00
rocky
rocky
postgresql:13 security update
2023-12-06 23:16:33
postgresql:12 security update
2024-01-09 04:07:10
postgresql:15 security update
2024-01-09 04:08:12
almalinux
almalinux
Important: postgresql:12 security update
2023-12-11 00:00:00
Important: postgresql security update
2023-12-13 00:00:00
Important: postgresql:13 security update
2023-11-29 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0513
2023-11-16 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.9%

JSON
Related for CVE-2023-5868
nessus45osv11cgr1cvelist1redhatcve1ibm5debiancve1veracode1ubuntucve1wolfi1prion1cbl_mariner1freebsd1alpinelinux1openvas22cloudfoundry1kaspersky1mageia1ubuntu1redos4redhat21oraclelinux5rocky3almalinux5photon1hp1