← CVE Intelligence

CVE-2023-5869

Postgresql: buffer overrun from integer overflow in array modification PUBLISHED

Description (CNA)

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Advanced Cluster Security 4.2unaffected 4.2.4-6 before *
Red Hat / Red Hat Advanced Cluster Security 4.2unaffected 4.2.4-6 before *
Red Hat / Red Hat Advanced Cluster Security 4.2unaffected 4.2.4-7 before *
Red Hat / Red Hat Advanced Cluster Security 4.2unaffected 4.2.4-6 before *
Red Hat / Red Hat Advanced Cluster Security 4.2unaffected 4.2.4-7 before *
Red Hat / Red Hat Enterprise Linux 7unaffected 0:9.2.24-9.el7_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8090020231114113712.a75119d5 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8090020231128173330.a75119d5 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8090020231201202407.a75119d5 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8090020231114113548.a75119d5 before *
Red Hat / Red Hat Enterprise Linux 8.1 Update Services for SAP Solutionsunaffected 8010020231130170510.c27ad7f8 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 8020020231128165246.4cda2c84 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 8020020231201202149.4cda2c84 before *
Red Hat / Red Hat Enterprise Linux 8.2 Telecommunications Update Serviceunaffected 8020020231128165246.4cda2c84 before *
Red Hat / Red Hat Enterprise Linux 8.2 Telecommunications Update Serviceunaffected 8020020231201202149.4cda2c84 before *
Red Hat / Red Hat Enterprise Linux 8.2 Update Services for SAP Solutionsunaffected 8020020231128165246.4cda2c84 before *
Red Hat / Red Hat Enterprise Linux 8.2 Update Services for SAP Solutionsunaffected 8020020231201202149.4cda2c84 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 8040020231127153301.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 8040020231127154806.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 8040020231127142440.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 8040020231127153301.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 8040020231127154806.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 8040020231127142440.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected 8040020231127153301.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected 8040020231127154806.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected 8040020231127142440.522a0ee4 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 8060020231114115246.ad008a3a before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 8060020231128165328.ad008a3a before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 8060020231201202249.ad008a3a before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020231114105206.63b34585 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020231128165335.63b34585 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020231201202316.63b34585 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020231113134015.63b34585 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:13.13-1.el9_3 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 9030020231120082734.rhel9 before *
Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Supportunaffected 0:13.13-1.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:13.13-1.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 9020020231115020618.rhel9 before *
Red Hat / Red Hat Software Collections for Red Hat Enterprise Linux 7unaffected 0:12.17-1.el7 before *
Red Hat / Red Hat Software Collections for Red Hat Enterprise Linux 7unaffected 0:10.23-2.el7 before *
Red Hat / Red Hat Software Collections for Red Hat Enterprise Linux 7unaffected 0:13.13-1.el7 before *
Red Hat / RHACS-3.74-RHEL-8unaffected 3.74.8-9 before *
Red Hat / RHACS-3.74-RHEL-8unaffected 3.74.8-9 before *
Red Hat / RHACS-3.74-RHEL-8unaffected 3.74.8-7 before *
Red Hat / RHACS-3.74-RHEL-8unaffected 3.74.8-9 before *
Red Hat / RHACS-3.74-RHEL-8unaffected 3.74.8-9 before *
Red Hat / RHACS-4.1-RHEL-8unaffected 4.1.6-6 before *
Red Hat / RHACS-4.1-RHEL-8unaffected 4.1.6-6 before *
Red Hat / RHACS-4.1-RHEL-8unaffected 4.1.6-6 before *
Red Hat / RHACS-4.1-RHEL-8unaffected 4.1.6-6 before *
Red Hat / RHACS-4.1-RHEL-8unaffected 4.1.6-6 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 8unaffected
Red Hat / Red Hat Enterprise Linux 9unaffected

CWE

CWE-190

References

ADP enrichment

CVE

No English description supplied.