CVE-2023-5868

Katalog CVE

CVSS 4.3 · Medium EPSS 2,8%

Kerentanan Function Call With Incorrect Argument Type pada postgresql, redhat codeready linux builder eus +14 lainnya. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.

Rincian

Terbit di NVD

10 Desember 2023

Terakhir diubah

23 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-686: Function Call With Incorrect Argument Type

EPSS (30 hari)

2,8% peluang dieksploitasi; lebih tinggi dari 86,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.postgresql.org/support/security/CVE-2023-5868/ mitigasi · advisory vendor
• https://access.redhat.com/errata/RHSA-2023:7545 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7579 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7580 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7581 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7616 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7656 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7666 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7667 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7694 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7695 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7714 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7770 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7772 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-5868 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7784
• https://access.redhat.com/errata/RHSA-2023:7785
• https://access.redhat.com/errata/RHSA-2023:7883
• https://access.redhat.com/errata/RHSA-2023:7884
• https://access.redhat.com/errata/RHSA-2023:7885
• https://access.redhat.com/errata/RHSA-2024:0304
• https://access.redhat.com/errata/RHSA-2024:0332
• https://access.redhat.com/errata/RHSA-2024:0337
• https://bugzilla.redhat.com/show_bug.cgi?id=2247168 issue tracking
• https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/ release notes