CVE-2023-5869

UNKNOWN

Published 2023-12-10T17:56:57.131Z

Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2023-5869. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1

8.8

/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score Metrics

Exploitability: N/A Impact: N/A

EPSS Score

v2023.03.01

0.042

probability

of exploitation in the wild

There is a 4.2% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-01-25

Exploit Probability

Percentile: 0.922

Higher than 92.2% of all CVEs

Attack Vector Metrics

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Impact Metrics

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Description

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Red Hat

Red Hat Advanced Cluster Security 4.2

Affected Versions:

4.2.4-6

Red Hat

Red Hat Advanced Cluster Security 4.2

Affected Versions:

4.2.4-6

Red Hat

Red Hat Advanced Cluster Security 4.2

Affected Versions:

4.2.4-7

Red Hat

Red Hat Advanced Cluster Security 4.2

Affected Versions:

4.2.4-6

Red Hat

Red Hat Advanced Cluster Security 4.2

Affected Versions:

4.2.4-7

Red Hat

Red Hat Enterprise Linux 7

Affected Versions:

0:9.2.24-9.el7_9

Red Hat

Red Hat Enterprise Linux 8

Affected Versions:

8090020231114113712.a75119d5

Red Hat

Red Hat Enterprise Linux 8

Affected Versions:

8090020231128173330.a75119d5

Red Hat

Red Hat Enterprise Linux 8

Affected Versions:

8090020231201202407.a75119d5

Red Hat

Red Hat Enterprise Linux 8

Affected Versions:

8090020231114113548.a75119d5

Red Hat

Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions

Affected Versions:

8010020231130170510.c27ad7f8

Red Hat

Red Hat Enterprise Linux 8.2 Advanced Update Support

Affected Versions:

8020020231128165246.4cda2c84

Red Hat

Red Hat Enterprise Linux 8.2 Advanced Update Support

Affected Versions:

8020020231201202149.4cda2c84

Red Hat

Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Affected Versions:

8020020231128165246.4cda2c84

Red Hat

Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Affected Versions:

8020020231201202149.4cda2c84

Red Hat

Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

Affected Versions:

8020020231128165246.4cda2c84

Red Hat

Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

Affected Versions:

8020020231201202149.4cda2c84

Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Affected Versions:

8040020231127153301.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Affected Versions:

8040020231127154806.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Affected Versions:

8040020231127142440.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Affected Versions:

8040020231127153301.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Affected Versions:

8040020231127154806.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Affected Versions:

8040020231127142440.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Affected Versions:

8040020231127153301.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Affected Versions:

8040020231127154806.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Affected Versions:

8040020231127142440.522a0ee4

Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support

Affected Versions:

8060020231114115246.ad008a3a

Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support

Affected Versions:

8060020231128165328.ad008a3a

Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support

Affected Versions:

8060020231201202249.ad008a3a

Red Hat

Red Hat Enterprise Linux 8.8 Extended Update Support

Affected Versions:

8080020231114105206.63b34585

Red Hat

Red Hat Enterprise Linux 8.8 Extended Update Support

Affected Versions:

8080020231128165335.63b34585

Red Hat

Red Hat Enterprise Linux 8.8 Extended Update Support

Affected Versions:

8080020231201202316.63b34585

Red Hat

Red Hat Enterprise Linux 8.8 Extended Update Support

Affected Versions:

8080020231113134015.63b34585

Red Hat

Red Hat Enterprise Linux 9

Affected Versions:

0:13.13-1.el9_3

Red Hat

Red Hat Enterprise Linux 9

Affected Versions:

9030020231120082734.rhel9

Red Hat

Red Hat Enterprise Linux 9.0 Extended Update Support

Affected Versions:

0:13.13-1.el9_0

Red Hat

Red Hat Enterprise Linux 9.2 Extended Update Support

Affected Versions:

0:13.13-1.el9_2

Red Hat

Red Hat Enterprise Linux 9.2 Extended Update Support

Affected Versions:

9020020231115020618.rhel9

Red Hat

Red Hat Software Collections for Red Hat Enterprise Linux 7

Affected Versions:

0:12.17-1.el7

Red Hat

Red Hat Software Collections for Red Hat Enterprise Linux 7

Affected Versions:

0:10.23-2.el7

Red Hat

Red Hat Software Collections for Red Hat Enterprise Linux 7

Affected Versions:

0:13.13-1.el7

Red Hat

RHACS-3.74-RHEL-8

Affected Versions:

3.74.8-9

Red Hat

RHACS-3.74-RHEL-8

Affected Versions:

3.74.8-9

Red Hat

RHACS-3.74-RHEL-8

Affected Versions:

3.74.8-7

Red Hat

RHACS-3.74-RHEL-8

Affected Versions:

3.74.8-9

Red Hat

RHACS-3.74-RHEL-8

Affected Versions:

3.74.8-9

Red Hat

RHACS-4.1-RHEL-8

Affected Versions:

4.1.6-6

Red Hat

RHACS-4.1-RHEL-8

Affected Versions:

4.1.6-6

Red Hat

RHACS-4.1-RHEL-8

Affected Versions:

4.1.6-6

Red Hat

RHACS-4.1-RHEL-8

Affected Versions:

4.1.6-6

Red Hat

RHACS-4.1-RHEL-8

Affected Versions:

4.1.6-6

Red Hat

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-9625-p7pg-3cxg

Advisory Details

CVSS Scoring

CVSS Score

7.5

CVSS Vector


                                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-5869

WEB https://access.redhat.com/errata/RHSA-2023:7545

WEB https://access.redhat.com/errata/RHSA-2023:7786

WEB https://access.redhat.com/errata/RHSA-2023:7788

WEB https://access.redhat.com/errata/RHSA-2023:7789

WEB https://access.redhat.com/errata/RHSA-2023:7790

WEB https://access.redhat.com/errata/RHSA-2023:7878

WEB https://access.redhat.com/errata/RHSA-2023:7883

WEB https://access.redhat.com/errata/RHSA-2023:7884

WEB https://access.redhat.com/errata/RHSA-2023:7885

WEB https://access.redhat.com/errata/RHSA-2024:0304

WEB https://access.redhat.com/errata/RHSA-2024:0332

WEB https://access.redhat.com/errata/RHSA-2024:0337

WEB https://access.redhat.com/security/cve/CVE-2023-5869

WEB https://bugzilla.redhat.com/show_bug.cgi?id=2247169

WEB https://security.netapp.com/advisory/ntap-20240119-0003

WEB https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749

WEB https://www.postgresql.org/support/security/CVE-2023-5869

WEB https://access.redhat.com/errata/RHSA-2023:7579

WEB https://access.redhat.com/errata/RHSA-2023:7580

WEB https://access.redhat.com/errata/RHSA-2023:7581

WEB https://access.redhat.com/errata/RHSA-2023:7616

WEB https://access.redhat.com/errata/RHSA-2023:7656

WEB https://access.redhat.com/errata/RHSA-2023:7666

WEB https://access.redhat.com/errata/RHSA-2023:7667

WEB https://access.redhat.com/errata/RHSA-2023:7694

WEB https://access.redhat.com/errata/RHSA-2023:7695

WEB https://access.redhat.com/errata/RHSA-2023:7714

WEB https://access.redhat.com/errata/RHSA-2023:7770

WEB https://access.redhat.com/errata/RHSA-2023:7771

WEB https://access.redhat.com/errata/RHSA-2023:7772

WEB https://access.redhat.com/errata/RHSA-2023:7778

WEB https://access.redhat.com/errata/RHSA-2023:7783

WEB https://access.redhat.com/errata/RHSA-2023:7784

WEB https://access.redhat.com/errata/RHSA-2023:7785

Advisory provided by GitHub Security Advisory Database. Published: December 10, 2023, Modified: September 16, 2024

References

https://access.redhat.com/errata/RHSA-2023:7545

https://access.redhat.com/errata/RHSA-2023:7579

https://access.redhat.com/errata/RHSA-2023:7580

https://access.redhat.com/errata/RHSA-2023:7581

https://access.redhat.com/errata/RHSA-2023:7616

https://access.redhat.com/errata/RHSA-2023:7656

https://access.redhat.com/errata/RHSA-2023:7666

https://access.redhat.com/errata/RHSA-2023:7667

https://access.redhat.com/errata/RHSA-2023:7694

https://access.redhat.com/errata/RHSA-2023:7695

https://access.redhat.com/errata/RHSA-2023:7714

https://access.redhat.com/errata/RHSA-2023:7770

https://access.redhat.com/errata/RHSA-2023:7771

https://access.redhat.com/errata/RHSA-2023:7772

https://access.redhat.com/errata/RHSA-2023:7778

https://access.redhat.com/errata/RHSA-2023:7783

https://access.redhat.com/errata/RHSA-2023:7784

https://access.redhat.com/errata/RHSA-2023:7785

https://access.redhat.com/errata/RHSA-2023:7786

https://access.redhat.com/errata/RHSA-2023:7788

https://access.redhat.com/errata/RHSA-2023:7789

https://access.redhat.com/errata/RHSA-2023:7790

https://access.redhat.com/errata/RHSA-2023:7878

https://access.redhat.com/errata/RHSA-2023:7883

https://access.redhat.com/errata/RHSA-2023:7884

https://access.redhat.com/errata/RHSA-2023:7885

https://access.redhat.com/errata/RHSA-2024:0304

https://access.redhat.com/errata/RHSA-2024:0332

https://access.redhat.com/errata/RHSA-2024:0337

https://access.redhat.com/security/cve/CVE-2023-5869

https://bugzilla.redhat.com/show_bug.cgi?id=2247169

https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/

https://www.postgresql.org/support/security/CVE-2023-5869/

Published: 2023-12-10T17:56:57.131Z

Last Modified: 2024-11-15T15:11:34.563Z

Copied to clipboard!

CVE-2023-5869

Expert Analysis

CVSS Score

EPSS Score

Attack Vector Metrics

Impact Metrics

Description

Available Exploits

Related News

Affected Products

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

Affected Versions:

GitHub Security Advisories

Advisory Details

CVSS Scoring

CVSS Score

CVSS Vector

References

References

Request Analysis

What to expect

Request Received!