Arbitrary Code Execution

🗓️ 27 Nov 2023 21:07:19Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

SQL array modification vulnerability in PostgreSQ

Reporter	Title	Published	Views	Family All 367
FreeBSD	postgresql-server -- Buffer overrun from integer overflow in array modification	9 Nov 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	26 Mar 202504:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	10 Jul 202407:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	30 Jan 202404:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	26 Mar 202504:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to buffer overflow due to PostgreSQL (CVE-2023-5869)	19 Feb 202408:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple PostgreSQL Vulnerabilities Affect IBM Storage Scale System	21 Jun 202415:45	–	ibm
IBM Security Bulletins	Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 Mar 202618:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to various issues in postgresql	31 Oct 202518:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Golang might affect IBM Spectrum Copy Data Management	12 Jan 202416:31	–	ibm

Vulners

Node

postgresql-13 postgresql-13Match13.2-1debian

AND

postgresql-13 postgresql-13Match13.3-1debian

AND

postgresql-13 postgresql-13Match13.1-1+b1debian

AND

debian debian_linuxMatch11

postgresql-11 postgresql-11Match11.12-0+deb10u1debian

AND

postgresql-11 postgresql-11Match11.10-0+deb10u1debian

AND

postgresql-11 postgresql-11Match11.9-0+deb10u1debian

AND

debian debian_linuxMatch10

postgresql12 postgresql12Match12.16-r0os

AND

postgresql12 postgresql12Match12.11-r0os

AND

postgresql12 postgresql12Match12.10-r0os

AND

postgresql12 postgresql12Match12.9-r1os

AND

postgresql12 postgresql12Match12.12-r0os

AND

postgresql12 postgresql12Match12.15-r0os

AND

postgresql12 postgresql12Match12.9-r0os

AND

alpinelinux alpine_linuxMatch3.15

postgresql14 postgresql14Match14.7-r3os

AND

postgresql14 postgresql14Match14.9-r0os

AND

postgresql14 postgresql14Match14.7-r4os

AND

postgresql14 postgresql14Match14.8-r0os

AND

alpinelinux alpine_linuxMatch3.18

postgresql15 postgresql15Match15.2-r3os

AND

postgresql15 postgresql15Match15.4-r2os

AND

postgresql15 postgresql15Match15.4-r1os

AND

postgresql15 postgresql15Match15.2-r2os

AND

postgresql15 postgresql15Match15.3-r0os

AND

postgresql15 postgresql15Match15.1-r0os

AND

postgresql15 postgresql15Match15.2-r1os

AND

postgresql15 postgresql15Match15.4-r0os

AND

postgresql15 postgresql15Match15.2-r4os

AND

postgresql15 postgresql15Match15.2-r0os

AND

postgresql15 postgresql15Match15.1-r1os

AND

postgresql15 postgresql15Match15.3-r1os

AND

alpinelinux alpine_linuxMatchedge

postgresql14 postgresql14Match14.7-r0os

AND

postgresql14 postgresql14Match14.5-r3os

AND

postgresql14 postgresql14Match14.8-r0os

AND

postgresql14 postgresql14Match14.9-r0os

AND

postgresql14 postgresql14Match14.6-r1os

AND

alpinelinux alpine_linuxMatch3.17

postgresql12 postgresql12Match12.11-r0os

AND

postgresql12 postgresql12Match12.12-r0os

AND

postgresql12 postgresql12Match12.16-r0os

AND

postgresql12 postgresql12Match12.15-r0os

AND

postgresql12 postgresql12Match12.11-r1os

AND

postgresql12 postgresql12Match12.10-r3os

AND

alpinelinux alpine_linuxMatch3.16

postgresql14 postgresql14Match14.2-r3os

AND

postgresql14 postgresql14Match14.8-r0os

AND

postgresql14 postgresql14Match14.4-r1os

AND

postgresql14 postgresql14Match14.9-r0os

AND

postgresql14 postgresql14Match14.4-r0os

AND

postgresql14 postgresql14Match14.3-r0os

AND

postgresql14 postgresql14Match14.7-r0os

AND

postgresql14 postgresql14Match14.5-r0os

AND

alpinelinux alpine_linuxMatch3.16

postgresql15 postgresql15Match15.4-r0os

AND

postgresql15 postgresql15Match15.2-r3os

AND

postgresql15 postgresql15Match15.3-r0os

AND

postgresql15 postgresql15Match15.2-r4os

AND

alpinelinux alpine_linuxMatch3.18

postgresql14 postgresql14Match14.1-r3os

AND

postgresql14 postgresql14Match14.9-r0os

AND

postgresql14 postgresql14Match14.2-r0os

AND

postgresql14 postgresql14Match14.4-r0os

AND

postgresql14 postgresql14Match14.3-r0os

AND

postgresql14 postgresql14Match14.8-r0os

AND

postgresql14 postgresql14Match14.1-r1os

AND

postgresql14 postgresql14Match14.5-r0os

AND

postgresql14 postgresql14Match14.1-r4os

AND

postgresql14 postgresql14Match14.1-r5os

AND

postgresql14 postgresql14Match14.7-r0os

AND

alpinelinux alpine_linuxMatch3.15

postgresql12 postgresql12Match12.14-r0os

AND

postgresql12 postgresql12Match12.15-r0os

AND

postgresql12 postgresql12Match12.12-r3os

AND

postgresql12 postgresql12Match12.13-r1os

AND

postgresql12 postgresql12Match12.16-r0os

AND

alpinelinux alpine_linuxMatch3.17

postgresql16 postgresql16Match16.0-r0os

AND

postgresql16 postgresql16Match16.0-r1os

AND

postgresql16 postgresql16Match16.0-r2os

AND

alpinelinux alpine_linuxMatchedge

postgresql12 postgresql12Match12.14-r2os

AND

postgresql12 postgresql12Match12.15-r0os

AND

postgresql12 postgresql12Match12.16-r0os

AND

postgresql12 postgresql12Match12.14-r3os

AND

alpinelinux alpine_linuxMatch3.18

postgresql14 postgresql14Match14.4-r2os

AND

postgresql14 postgresql14Match14.3-r0os

AND

postgresql14 postgresql14Match14.7-r3os

AND

postgresql14 postgresql14Match14.4-r0os

AND

postgresql14 postgresql14Match14.1-r4os

AND

postgresql14 postgresql14Match14.2-r2os

AND

postgresql14 postgresql14Match14.3-r1os

AND

postgresql14 postgresql14Match14.8-r0os

AND

postgresql14 postgresql14Match14.7-r1os

AND

postgresql14 postgresql14Match14.5-r3os

AND

postgresql14 postgresql14Match14.5-r1os

AND

postgresql14 postgresql14Match14.1-r7os

AND

postgresql14 postgresql14Match14.9-r1os

AND

postgresql14 postgresql14Match14.8-r1os

AND

postgresql14 postgresql14Match14.9-r0os

AND

postgresql14 postgresql14Match14.7-r4os

AND

postgresql14 postgresql14Match14.6-r1os

AND

postgresql14 postgresql14Match14.7-r2os

AND

postgresql14 postgresql14Match14.2-r3os

AND

postgresql14 postgresql14Match14.5-r0os

AND

postgresql14 postgresql14Match14.2-r1os

AND

postgresql14 postgresql14Match14.1-r1os

AND

postgresql14 postgresql14Match14.7-r0os

AND

postgresql14 postgresql14Match14.5-r2os

AND

postgresql14 postgresql14Match14.6-r0os

AND

alpinelinux alpine_linuxMatchedge

postgresql15 postgresql15Match15.4-r0os

AND

postgresql15 postgresql15Match15.1-r0os

AND

postgresql15 postgresql15Match15.3-r0os

AND

postgresql15 postgresql15Match15.2-r0os

AND

alpinelinux alpine_linuxMatch3.17

postgresql16 postgresql16Match16.0-r2os

AND

postgresql16 postgresql16Match16.0-r1os

AND

alpinelinux alpine_linuxMatch3.19

postgresql14 postgresql14Match14.9-r1os

AND

alpinelinux alpine_linuxMatch3.19

postgresql15 postgresql15Match15.4-r2os

AND

postgresql15 postgresql15Match15.4-r1os

AND

alpinelinux alpine_linuxMatch3.19

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-5869
access	www.access.redhat.com/security/cve/CVE-2023-5869
security	www.security.netapp.com/advisory/ntap-20240119-0003/
postgresql	www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
postgresql	www.postgresql.org/support/security/CVE-2023-5869/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2023:7545
access	www.access.redhat.com/errata/RHSA-2023:7579
access	www.access.redhat.com/errata/RHSA-2023:7580
access	www.access.redhat.com/errata/RHSA-2023:7581

25 Jan 2024 12:21Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.8

EPSS0.01608