CVE-2023-5869 Postgresql: buffer overrun from integer overflow in array modification
Authenticated users can trigger an integer overflow in array modification to execute arbitrary code and read server memory.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-5869?
CVE-2023-5869 is a high-severity vulnerability in Postgresql Postgresql, published on 10 Dec 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
Weakness: CWE-190
Which versions are affected by CVE-2023-5869?
1 open source package ship an affected version, including postgresql. It affects 21 products.
| Package | Affected | Fixed in |
|---|---|---|
postgresql Bitnami | From 11.0.0 | 11.22.0, 12.17.0, 13.13.0, 14.10.0, 15.5.0, 16.0.1 |
Linux distribution packages (39)
postgresql AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-contrib AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-docs AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-plperl AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-plpython3 AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-pltcl AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-server AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-server-devel AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-static AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-test AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-test-rpm-macros AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-upgrade AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql-upgrade-devel AlmaLinux:8 | All versions | 10.23-3.module_el8.9.0+3703+a01fd377 |
postgresql Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-contrib Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-devel Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-docs Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-libs Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-plperl Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-plpython Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-pltcl Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-server Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-static Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-test Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql-upgrade Red Hat:enterprise_linux:7::client | All versions | 0:9.2.24-9.el7_9 |
postgresql Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-contrib Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-docs Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-plperl Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-plpython Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-pltcl Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-server Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-static Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-test Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql-upgrade Red Hat:enterprise_linux:7::computenode | All versions | 0:9.2.24-9.el7_9 |
postgresql Red Hat:enterprise_linux:7::server | All versions | 0:9.2.24-9.el7_9 |
Products include Postgresql Postgresql, Redhat Codeready Linux Builder Eus, Redhat Codeready Linux Builder Eus for Power Little Endian Eus, Redhat Codeready Linux Builder for Arm64 Eus, Redhat Codeready Linux Builder for Ibm Z Systems Eus, Redhat Codeready Linux Builder for Power Little Endian Eus and 15 more.
How do I fix CVE-2023-5869?
Upgrade postgresql to a fixed version for your release line: 11.22.0, 12.17.0, 13.13.0 or 14.10.0.
Is CVE-2023-5869 being exploited?
There is no known exploitation of CVE-2023-5869 in the wild and no public exploit code.
Other vulnerabilities in Postgresql Postgresql
Sources
Also known as ALPINE-CVE-2023-5869, ALSA-2023:7790, AZL-32104, BELL-CVE-2023-5869, BIT-postgresql-2023-5869, CLEANSTART-2026-ZS91347 and 16 more.