First published: Wed Dec 06 2023(Updated: )
Jingzhou Fu discovered that PostgreSQL incorrectly handled certain unknown arguments in aggregate function calls. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2023-5868) Pedro Gallegos discovered that PostgreSQL incorrectly handled modifying certain SQL array values. A remote attacker could use this issue to obtain sensitive information, or possibly execute arbitrary code. (CVE-2023-5869) Hemanth Sandrana and Mahendrakar Srinivasarao discovered that PostgreSQL allowed the pg_signal_backend role to signal certain superuser processes, contrary to expectations. (CVE-2023-5870)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/postgresql-15 | <15.5-0ubuntu0.23.10.1 | 15.5-0ubuntu0.23.10.1 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/postgresql-client-15 | <15.5-0ubuntu0.23.10.1 | 15.5-0ubuntu0.23.10.1 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/postgresql-15 | <15.5-0ubuntu0.23.04.1 | 15.5-0ubuntu0.23.04.1 |
Ubuntu Ubuntu | =23.04 | |
All of | ||
ubuntu/postgresql-client-15 | <15.5-0ubuntu0.23.04.1 | 15.5-0ubuntu0.23.04.1 |
Ubuntu Ubuntu | =23.04 | |
All of | ||
ubuntu/postgresql-14 | <14.10-0ubuntu0.22.04.1 | 14.10-0ubuntu0.22.04.1 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/postgresql-client-14 | <14.10-0ubuntu0.22.04.1 | 14.10-0ubuntu0.22.04.1 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/postgresql-12 | <12.17-0ubuntu0.20.04.1 | 12.17-0ubuntu0.20.04.1 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/postgresql-client-12 | <12.17-0ubuntu0.20.04.1 | 12.17-0ubuntu0.20.04.1 |
Ubuntu Ubuntu | =20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The vulnerability ID for this PostgreSQL vulnerability is CVE-2023-5868.
The potential impact of this vulnerability is that a remote attacker could possibly obtain sensitive information.
Versions 12, 14, and 15 of PostgreSQL are affected by this vulnerability.
Yes, fixes are available for this vulnerability.
You can find more information about this vulnerability at the following references: [CVE-2023-5869](https://ubuntu.com/security/CVE-2023-5869), [CVE-2023-5870](https://ubuntu.com/security/CVE-2023-5870), [CVE-2023-5868](https://ubuntu.com/security/CVE-2023-5868).