CVE-2023-5869

HIGH

MEDIUM Priority: 0.38 BB Relevance: 68/100

Published: 2023-12-10 Modified: 2026-11-04 First seen: 2026-11-02 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network

AC: Low

PR: Low

UI: None

S: Unchanged

C: High

I: High

A: High

Description

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

Weakness Classification (1)

CWE-190 — Integer Overflow or Wraparound

Affected Software (45)

Vendor	Product	Version
postgresql	postgresql	11.0 – 11.22
postgresql	postgresql	16.0
redhat	codeready_linux_builder_eus	9.2
redhat	codeready_linux_builder_eus_for_power_little_endian_eus	9.0_ppc64le
redhat	codeready_linux_builder_eus_for_power_little_endian_eus	9.2_ppc64le
redhat	codeready_linux_builder_for_arm64_eus	8.6_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.0_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.2_aarch64
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.2_s390x
redhat	codeready_linux_builder_for_power_little_endian_eus	9.0_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	9.2_ppc64le
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_eus	8.6
redhat	enterprise_linux_eus	8.8
redhat	enterprise_linux_eus	9.0
redhat	enterprise_linux_eus	9.2
redhat	enterprise_linux_for_arm_64	8.0
redhat	enterprise_linux_for_arm_64	8.8_aarch64
redhat	enterprise_linux_for_ibm_z_systems	7.0_s390x
redhat	enterprise_linux_for_ibm_z_systems	8.0_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	8.6_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	8.8_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	9.0_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	9.2_s390x
redhat	enterprise_linux_for_power_big_endian	7.0_ppc64
redhat	enterprise_linux_for_power_little_endian	7.0_ppc64le
redhat	enterprise_linux_for_power_little_endian	8.0_ppc64le

Showing 30 of 45 entries