KLA67224 Security vulnerability in PostgreSQL

Security vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to bypass security restrictions.

Original advisories

PostgreSQL: CVE-2024-4317: Restrict visibility of “pg_stats_ext” and “pg_stats_ext_exprs” entries to the table owner

Related products

PostgreSQL

CVE list

CVE-2024-4317 warning

Solution

Update to the latest version

Download PostgreSQL

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• PostgreSQL 14 earlier than 14.12PostgreSQL 15 earlier than 15.7PostgreSQL 16 earlier than 16.3