vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-5869

Postgresql: buffer overrun from integer overflow in array modification

HIGH
8.8
CVSS Score
Published: December 10, 2023 at 05:56 PM UTC
Updated: June 17, 2026 at 06:49 AM UTC
21 products affected across 2 vendorsEnterprise LinuxEnterprise Linux DesktopEnterprise Linux Server

Using Red Hat Advanced Cluster Security 4.2 by Red Hat?

Get instant alerts when new vulnerabilities affect Red Hat Advanced Cluster Security 4.2 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 4%

Description

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

PostgreSQL· PostgreSQL
95%
11.0 ≤ v < 11.2212.0 ≤ v < 12.1713.0 ≤ v < 13.1314.0 ≤ v < 14.1015.0 ≤ v < 15.516.0
Affected range stops below 11.22, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.17, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.13, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.10, so it looks safe — our inference, not a vendor statement
Affected range stops below 15.5, so it looks safe — our inference, not a vendor statement
Codeready Linux Builder Eus· Red Hat
95%
9.2
Codeready Linux Builder Eus for Power Little Endian Eus· Red Hat
95%
9.0_ppc64le9.2_ppc64le
Codeready Linux Builder for ARM64 Eus· Red Hat
95%
8.6_aarch649.0_aarch649.2_aarch64
Codeready Linux Builder for IBM Z Systems Eus· Red Hat
95%
9.0_s390x9.2_s390x
Codeready Linux Builder for Power Little Endian Eus· Red Hat
95%
9.0_ppc64le9.2_ppc64le
Enterprise Linux· Red Hatrpm
95%
8.09.0
Vendor states this is fixed in 0:13.13-1.el9_0 (unaffected)
Vendor states this is fixed in 0:13.13-1.el9_2 (unaffected)
Vendor states this is fixed in 0:13.13-1.el9_3 (unaffected)
Vendor states this is fixed in 0:9.2.24-9.el7_9 (unaffected)
Vendor states this is fixed in 8 (unaffected)
Vendor states this is fixed in 8020020231128165246.4cda2c84 (unaffected)
Vendor states this is fixed in 8020020231201202149.4cda2c84 (unaffected)
Vendor states this is fixed in 8040020231127142440.522a0ee4 (unaffected)
Vendor states this is fixed in 8040020231127153301.522a0ee4 (unaffected)
Vendor states this is fixed in 8040020231127154806.522a0ee4 (unaffected)
Vendor states this is fixed in 8060020231114115246.ad008a3a (unaffected)
Vendor states this is fixed in 8060020231128165328.ad008a3a (unaffected)
Vendor states this is fixed in 8060020231201202249.ad008a3a (unaffected)
Vendor states this is fixed in 8080020231113134015.63b34585 (unaffected)
Vendor states this is fixed in 8080020231114105206.63b34585 (unaffected)
Vendor states this is fixed in 8080020231128165335.63b34585 (unaffected)
Vendor states this is fixed in 8080020231201202316.63b34585 (unaffected)
Vendor states this is fixed in 8090020231114113548.a75119d5 (unaffected)
Vendor states this is fixed in 8090020231114113712.a75119d5 (unaffected)
Vendor states this is fixed in 8090020231128173330.a75119d5 (unaffected)
Vendor states this is fixed in 8090020231201202407.a75119d5 (unaffected)
Vendor states this is fixed in 9020020231115020618.rhel9 (unaffected)
Vendor states this is fixed in 9030020231120082734.rhel9 (unaffected)
Vendor states this is fixed in 6 (unknown)
Enterprise Linux Desktop· Red Hatrubygems
95%
7.0
Enterprise Linux Eus· Red Hatrpm
95%
8.68.89.09.2
Enterprise Linux for Arm 64· Red Hat
95%
8.08.8_aarch64

References (35)

Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2023:7545
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2023:7579
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2023:7580
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2023:7581
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2023:7616
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2023:7656
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2023:7666
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2023:7667

CVSS

8.8HIGHredhat
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-190

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card