CVE-2023-5869

Katalog CVE

CVSS 8.8 · High EPSS 4,3%

Kerentanan Integer Overflow or Wraparound pada postgresql, redhat codeready linux builder eus +19 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

Rincian

Terbit di NVD

10 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

4,3% peluang dieksploitasi; lebih tinggi dari 90,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.postgresql.org/support/security/CVE-2023-5869/ advisory vendor
• https://access.redhat.com/errata/RHSA-2023:7545 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7579 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7580 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7581 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7616 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7656 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7666 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7667 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7694 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7695 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7714 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7770 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7771 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7772 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7778 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7783 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-5869 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7784
• https://access.redhat.com/errata/RHSA-2023:7785
• https://access.redhat.com/errata/RHSA-2023:7786
• https://access.redhat.com/errata/RHSA-2023:7788
• https://access.redhat.com/errata/RHSA-2023:7789
• https://access.redhat.com/errata/RHSA-2023:7790
• https://access.redhat.com/errata/RHSA-2023:7878