Lucene search
GoogleOSV:ALSA-2023:4527HistoryAug 08, 2023 - 12:00 a.m.
Moderate: postgresql:13 security update
2023-08-0800:00:00
Google
osv.dev
10
postgresql
13
security update
schema_element
row security policies
cve-2023-2454
cve-2023-2455
dbms
software
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.8%
PostgreSQL is an advanced object-relational database management system (DBMS).
Security Fix(es):
- postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
- postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
redhat
redhat
(RHSA-2023:5269) Moderate: postgresql:15 security update
2023-09-19 12:39:03
(RHSA-2023:4313) Moderate: rh-postgresql12-postgresql security update
2023-07-27 08:58:10
(RHSA-2023:4327) Moderate: postgresql:15 security update
2023-07-31 08:41:19
oraclelinux
oraclelinux
15 security update
2023-08-02 00:00:00
postgresql:10 security update
2023-08-11 00:00:00
postgresql:13 security update
2023-08-10 00:00:00
osv
osv
postgresql-10, postgresql-12, postgresql-14, postgresql-15 vulnerabilities
2023-05-24 14:16:06
Moderate: postgresql:15 security update
2023-09-19 00:00:00
Moderate: postgresql:15 security update
2023-07-31 00:00:00
nessus
nessus
AlmaLinux 8 : postgresql:10 (ALSA-2023:4539)
2023-08-09 00:00:00
AlmaLinux 9 : postgresql:15 (ALSA-2023:4327)
2023-08-02 00:00:00
RHEL 8 : postgresql:15 (RHSA-2023:5269)
2023-09-19 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2206-1)
2023-05-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2219-1)
2023-05-17 00:00:00
Mageia: Security Advisory (MGASA-2023-0187)
2023-06-01 00:00:00
kaspersky
kaspersky
KLA49176 Multiple vulnerabilities in PostgreSQL
2023-05-11 00:00:00
almalinux
almalinux
Moderate: postgresql:15 security update
2023-09-19 00:00:00
Moderate: postgresql:10 security update
2023-08-08 00:00:00
Moderate: postgresql:13 security update
2023-08-08 00:00:00
rocky
rocky
postgresql:13 security update
2023-10-06 23:10:12
postgresql security update
2023-08-31 16:55:40
postgresql:15 security update
2023-08-08 12:35:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2023-05-24 00:00:00
PostgreSQL vulnerability
2023-07-13 00:00:00
ibm
ibm
mageia
mageia
Updated postgresql packages fix security vulnerability
2023-05-31 09:41:32
cloudfoundry
cloudfoundry
USN-6104-1: PostgreSQL vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
debian
debian
[SECURITY] [DSA 5401-1] postgresql-13 security update
2023-05-11 16:36:32
[SECURITY] [DLA 3422-1] postgresql-11 security update
2023-05-15 09:06:31
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0394
2023-05-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2359
2024-02-27 09:01:10
amazon
amazon
Important: postgresql
2024-02-15 03:52:00
Important: postgresql92
2023-06-05 16:39:00
prion
prion
Code injection
2023-06-09 19:15:00
Code injection
2023-06-09 19:15:00
ubuntucve
ubuntucve
CVE-2023-2454
2023-05-12 00:00:00
CVE-2023-2455
2023-05-12 00:00:00
cve
cve
CVE-2023-2454
2023-06-09 19:15:09
CVE-2023-2455
2023-06-09 19:15:09
debiancve
debiancve
CVE-2023-2454
2023-06-09 19:15:09
CVE-2023-2455
2023-06-09 19:15:09
cvelist
cvelist
CVE-2023-2454
2023-06-09 00:00:00
CVE-2023-2455
2023-06-09 00:00:00
redhatcve
redhatcve
veracode
veracode
Information Disclosure
2023-06-07 01:36:32
Arbitrary Code Execution
2023-06-07 01:36:40
freebsd
freebsd
nvd
nvd
CVE-2023-2454
2023-06-09 19:15:09
CVE-2023-2455
2023-06-09 19:15:09
alpinelinux
alpinelinux
CVE-2023-2454
2023-06-09 19:15:09
CVE-2023-2455
2023-06-09 19:15:09
redos
redos
ROS-20240329-12
2024-03-29 00:00:00
ROS-20240329-11
2024-03-29 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.8%
Related for OSV:ALSA-2023:4527