Search CVE reports


Toggle filters

21 – 23 of 23 results


CVE-2023-5870

Medium priority

Some fixes available 6 of 7

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a...

8 affected packages

postgresql-14, postgresql-12, postgresql-10, postgresql-9.5, postgresql-9.3...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-14 Not in release Fixed Not in release Not in release
postgresql-12 Not in release Not in release Fixed Not in release
postgresql-10 Not in release Not in release Not in release Fixed
postgresql-9.5 Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release
postgresql-15 Not in release Not in release Not in release Not in release
postgresql-16 Not affected Not in release Not in release Not in release
Show all 8 packages Show less packages

CVE-2023-5869

Medium priority

Some fixes available 6 of 7

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array...

8 affected packages

postgresql-14, postgresql-12, postgresql-10, postgresql-9.5, postgresql-9.3...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-14 Not in release Fixed Not in release Not in release
postgresql-12 Not in release Not in release Fixed Not in release
postgresql-10 Not in release Not in release Not in release Fixed
postgresql-9.5 Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release
postgresql-15 Not in release Not in release Not in release Not in release
postgresql-16 Not affected Not in release Not in release Not in release
Show all 8 packages Show less packages

CVE-2023-5868

Medium priority

Some fixes available 5 of 6

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from...

8 affected packages

postgresql-14, postgresql-12, postgresql-10, postgresql-9.5, postgresql-9.3...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-14 Not in release Fixed Not in release Not in release
postgresql-12 Not in release Not in release Fixed Not in release
postgresql-10 Not in release Not in release Not in release Fixed
postgresql-9.5 Not in release Not in release Not in release Not in release
postgresql-9.3 Not in release Not in release Not in release Not in release
postgresql-9.1 Not in release Not in release Not in release Not in release
postgresql-15 Not in release Not in release Not in release Not in release
postgresql-16 Not affected Not in release Not in release Not in release
Show all 8 packages Show less packages