Lucene search
+L

49 matches found

RedHat Linux
RedHat Linux
•added 2023/12/13 3:36 p.m.•17 views

postgresql: Memory disclosure in aggregate function calls

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.4AI score0.02775EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/12/13 8:06 a.m.•15 views

postgresql: Memory disclosure in aggregate function calls

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.4AI score0.02775EPSS
SaveExploits0References6
NVD
NVD
•added 2023/12/10 6:15 p.m.•36 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS0.02775EPSS
SaveExploits0References27
OSV
OSV
•added 2023/12/10 6:15 p.m.•5 views

DEBIAN-CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.1AI score0.02775EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/10 6:15 p.m.•8 views

ALPINE-CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.3AI score0.02775EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/10 6:15 p.m.•33 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6AI score
SaveExploits0References27
Prion
Prion
•added 2023/12/10 6:15 p.m.•42 views

Design/Logic Flaw

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4CVSS6.5AI score0.02775EPSS
SaveExploits0References26Affected Software16
Cvelist
Cvelist
•added 2023/12/10 5:56 p.m.•84 views

CVE-2023-5868 Postgresql: memory disclosure in aggregate function calls

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.6AI score0.02775EPSS
SaveExploits0References25
Debian CVE
Debian CVE
•added 2023/12/10 5:56 p.m.•74 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.7AI score0.02775EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/12/10 5:56 p.m.•33 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS7AI score0.02775EPSS
SaveExploits0
CVE
CVE
•added 2023/12/10 5:56 p.m.•776 views

CVE-2023-5868

CVE-2023-5868 affects PostgreSQL memory handling via certain aggregate calls with unknown-type arguments, allowing remote access to parts of server memory through excessive output in aggregates. The issue is documented across multiple vendors' advisories, with remediation generally involving upgr...

4.3CVSS6.8AI score0.02775EPSS
SaveExploits0References27Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/10 12:00 a.m.•2 views

CVE-2023-5868: Function Call With Incorrect Argument Type

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6AI score0.02775EPSS
SaveExploits0References32
RedHat Linux
RedHat Linux
•added 2023/12/07 8:26 a.m.•20 views

postgresql: Memory disclosure in aggregate function calls

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.4AI score0.02775EPSS
SaveExploits0References6
Veracode
Veracode
•added 2023/11/27 9:07 p.m.•33 views

Memory Disclosure

PostgreSQL is vulnerable to Memory Disclosure. The vulnerability is caused due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory. This can lead to an attacker access sensitive information by exploiting certain aggregate function call...

4.3CVSS6.2AI score0.02775EPSS
SaveExploits0References27Affected Software6
UbuntuCve
UbuntuCve
•added 2023/11/15 12:00 a.m.•43 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS6.8AI score0.02775EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2023/11/10 10:44 a.m.•66 views

CVE-2023-5868

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes,...

4.3CVSS5.8AI score0.02775EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2023/11/09 12:00 a.m.•22 views

FreeBSD : postgresql-server -- Memory disclosure in aggregate function calls (31f45d06-7f0e-11ee-94b4-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 31f45d06-7f0e-11ee-94b4-6cc21735f730 advisory. - Memory disclosure in aggregate function callsmore details CVE-2023-5868 Note that Nessus has not test...

4.3CVSS6.4AI score0.02775EPSS
SaveExploits0References3
PostrgeSql
PostrgeSql
•added 2023/11/09 12:00 a.m.•106 views

Vulnerability in core server (CVE-2023-5868)

Memory disclosure in aggregate function calls Certain aggregate function calls receiving "unknown"-type arguments could disclose bytes of server memory from the end of the "unknown"-type value to the next zero byte. One typically gets an "unknown"-type value via a string literal having no type...

4.3CVSS6.7AI score0.02775EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/11/09 12:00 a.m.•9 views

PostgreSQL Security Vulnerabilities

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, etc. A security vulnerability exists in PostgreSQL. A security vulnerability...

4.3CVSS8AI score0.02775EPSS
SaveExploits0References30
FreeBSD
FreeBSD
•added 2023/11/09 12:00 a.m.•51 views

postgresql-server -- Memory disclosure in aggregate function calls

PostgreSQL Project reports: Certain aggregate function calls receiving "unknown"-type arguments could disclose bytes of server memory from the end of the "unknown"-type value to the next zero byte. One typically gets an "unknown"-type value via a string literal having no type designation. We have...

4.3CVSS7AI score0.02775EPSS
SaveExploits0References1
Rows per page
Query Builder