Lucene search
+L

52 matches found

RedHat Linux
RedHat Linux
•added 2023/12/13 3:36 p.m.•17 views

postgresql: Memory disclosure in aggregate function calls

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.4AI score0.02775EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/12/13 8:06 a.m.•15 views

postgresql: Memory disclosure in aggregate function calls

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.4AI score0.02775EPSS
SaveExploits0References6
NVD
NVD
•added 2023/12/10 6:15 p.m.•36 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS0.02775EPSS
SaveExploits0References27
OSV
OSV
•added 2023/12/10 6:15 p.m.•5 views

DEBIAN-CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.1AI score0.02775EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/10 6:15 p.m.•34 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6AI score
SaveExploits0References27
OSV
OSV
•added 2023/12/10 6:15 p.m.•8 views

ALPINE-CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.3AI score0.02775EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/10 6:15 p.m.•42 views

Design/Logic Flaw

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4CVSS6.5AI score0.02775EPSS
SaveExploits0References26Affected Software16
AlpineLinux
AlpineLinux
•added 2023/12/10 5:56 p.m.•33 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS7AI score0.02775EPSS
SaveExploits0
CVE
CVE
•added 2023/12/10 5:56 p.m.•776 views

CVE-2023-5868

CVE-2023-5868 affects PostgreSQL memory handling via certain aggregate calls with unknown-type arguments, allowing remote access to parts of server memory through excessive output in aggregates. The issue is documented across multiple vendors' advisories, with remediation generally involving upgr...

4.3CVSS6.8AI score0.02775EPSS
SaveExploits0References27Affected Software1
Cvelist
Cvelist
•added 2023/12/10 5:56 p.m.•84 views

CVE-2023-5868 Postgresql: memory disclosure in aggregate function calls

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.6AI score0.02775EPSS
SaveExploits0References25
Mend
Mend
•added 2023/12/10 5:56 p.m.•3 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

5.3CVSS0.02775EPSS
SaveExploits0References29
Debian CVE
Debian CVE
•added 2023/12/10 5:56 p.m.•74 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.7AI score0.02775EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/10 12:00 a.m.•3 views

CVE-2023-5868: Function Call With Incorrect Argument Type

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6AI score0.02775EPSS
SaveExploits0References32
RedHat Linux
RedHat Linux
•added 2023/12/07 8:26 a.m.•20 views

postgresql: Memory disclosure in aggregate function calls

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.4AI score0.02775EPSS
SaveExploits0References6
Veracode
Veracode
•added 2023/11/27 9:07 p.m.•33 views

Memory Disclosure

PostgreSQL is vulnerable to Memory Disclosure. The vulnerability is caused due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory. This can lead to an attacker access sensitive information by exploiting certain aggregate function call...

4.3CVSS6.2AI score0.02775EPSS
SaveExploits0References27Affected Software6
UbuntuCve
UbuntuCve
•added 2023/11/15 12:00 a.m.•43 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.8AI score0.02775EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2023/11/10 10:44 a.m.•67 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS5.8AI score0.02775EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/11/09 12:00 a.m.•10 views

PostgreSQL Security Vulnerabilities

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, etc. A security vulnerability exists in PostgreSQL. A security vulnerability...

4.3CVSS8AI score0.02775EPSS
SaveExploits0References30
PostrgeSql
PostrgeSql
•added 2023/11/09 12:00 a.m.•106 views

Vulnerability in core server (CVE-2023-5868)

Memory disclosure in aggregate function calls Certain aggregate function calls receiving "unknown"-type arguments could disclose bytes of server memory from the end of the "unknown"-type value to the next zero byte. One typically gets an "unknown"-type value via a string literal having no type...

4.3CVSS6.7AI score0.02775EPSS
SaveExploits0References1Affected Software1
FreeBSD
FreeBSD
•added 2023/11/09 12:00 a.m.•51 views

postgresql-server -- Memory disclosure in aggregate function calls

PostgreSQL Project reports: Certain aggregate function calls receiving "unknown"-type arguments could disclose bytes of server memory from the end of the "unknown"-type value to the next zero byte. One typically gets an "unknown"-type value via a string literal having no type designation. We have...

4.3CVSS7AI score0.02775EPSS
SaveExploits0References1
Rows per page
Query Builder