Integer overflow in PostgreSQL - CVE-2023-5869

Vulnerability identifier: #VU82942

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2023-5869

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
PostgreSQL
Debian Linux
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
Galera for Ericsson 15
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
CentOS
Anolis OS
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Legacy Module
SUSE Package Hub 15
Server Applications Module
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
IBM Security QRadar Network Threat Analytics
PowerStore T
Dell EMC PowerStore Family Operating System
IBM Cloud Pak for Watson AIOps
Storage Protect Plus Server
Dell Security Management Server
NetWorker Management Console (NMC)
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Sterling Connect:Direct Web Services
Dell NetWorker Virtual Edition
IBM Cloud Pak for Business Automation
IBM Observability with Instana
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
postgresql-9.5 (Ubuntu package)
postgresql-client-9.5 (Ubuntu package)
postgresql-10 (Ubuntu package)
postgresql-client-10 (Ubuntu package)
postgres-decoderbufs
pgaudit
pg_repack
postgresql-plpython
postgresql-pltcl
postgresql-server
postgresql-test
postgresql-plperl
postgresql-libs
postgresql-docs
postgresql-contrib
postgresql
postgresql-devel
postgresql (Red Hat package)
rh-postgresql10-postgresql (Red Hat package)
postgresql-plpython3
postgresql-test-rpm-macros
postgresql-static
postgresql-server-devel
postgresql-upgrade
postgresql-upgrade-devel
postgresql-client-12 (Ubuntu package)
postgresql-12 (Ubuntu package)
rh-postgresql12-postgresql (Red Hat package)
postgresql12-devel-debuginfo
postgresql12-debuginfo
postgresql12-server-devel-debuginfo
postgresql12-server-devel
postgresql12-contrib
postgresql12-server-debuginfo
postgresql12-contrib-debuginfo
postgresql12-plperl
postgresql12-server
postgresql12-pltcl
postgresql12-plpython-debuginfo
postgresql12-pltcl-debuginfo
postgresql12-plpython
postgresql12-plperl-debuginfo
postgresql12
postgresql12-docs
postgresql12-debugsource
postgresql12-devel
postgresql12-llvmjit
postgresql12-llvmjit-devel
postgresql12-llvmjit-debuginfo
postgresql12-test
postgresql-13 (Debian package)
rh-postgresql13-postgresql (Red Hat package)
postgresql13-server
postgresql13-plperl-debuginfo
postgresql13-plperl
postgresql13
postgresql13-pltcl-debuginfo
postgresql13-debuginfo
postgresql13-docs
postgresql13-server-devel
postgresql13-devel
postgresql13-debugsource
postgresql13-devel-debuginfo
postgresql13-plpython
postgresql13-plpython-debuginfo
postgresql13-contrib-debuginfo
postgresql13-contrib
postgresql13-server-debuginfo
postgresql13-pltcl
postgresql13-server-devel-debuginfo
postgresql13-test
postgresql13-llvmjit
postgresql13-llvmjit-debuginfo
postgresql13-llvmjit-devel
libpq
libpq-debuginfo
libpq-debugsource
libpq-devel
postgresql-13-pltcl
postgresql-13
postgresql-13-contrib
postgresql-13-debuginfo
postgresql-13-debugsource
postgresql-13-docs
postgresql-13-llvmjit
postgresql-13-plperl
postgresql-13-test-rpm-macros
postgresql-13-test
postgresql-13-static
postgresql-13-server-devel
postgresql-13-server
postgresql-13-private-libs
postgresql-13-private-devel
postgresql-13-plpython3
postgresql-client-14 (Ubuntu package)
postgresql-14 (Ubuntu package)
postgresql14-devel
postgresql14-devel-debuginfo
postgresql14-pltcl-debuginfo
postgresql14-contrib
postgresql14-plpython-debuginfo
postgresql14-debuginfo
postgresql14-plpython
postgresql14-pltcl
postgresql14-contrib-debuginfo
postgresql14
postgresql14-docs
postgresql14-plperl
postgresql14-server
postgresql14-plperl-debuginfo
postgresql14-server-debuginfo
postgresql14-server-devel
postgresql14-server-devel-debuginfo
postgresql14-debugsource
postgresql14-llvmjit
postgresql14-test
postgresql14-llvmjit-devel
postgresql14-llvmjit-debuginfo
postgresql-15 (Ubuntu package)
postgresql-client-15 (Ubuntu package)
postgresql-15 (Debian package)
postgresql-private-libs
postgresql-private-devel
postgresql15
postgresql15-contrib
postgresql15-devel-debuginfo
postgresql15-plperl
postgresql15-debuginfo
postgresql15-plperl-debuginfo
postgresql15-plpython
postgresql15-plpython-debuginfo
postgresql15-debugsource
postgresql15-pltcl
postgresql15-server-debuginfo
postgresql15-docs
postgresql15-server
postgresql15-contrib-debuginfo
postgresql15-devel
postgresql15-server-devel-debuginfo
postgresql15-server-devel
postgresql15-pltcl-debuginfo
postgresql15-test
postgresql15-llvmjit-devel
postgresql15-llvmjit
postgresql15-llvmjit-debuginfo
postgresql16-devel-debuginfo
postgresql16-debugsource
postgresql16-plperl-debuginfo
postgresql16-devel
postgresql16-server-devel
postgresql16-contrib-debuginfo
libpq5-debuginfo
postgresql16-server-debuginfo
postgresql16-pltcl
libecpg6-debuginfo
libecpg6
postgresql16-server
postgresql16-debuginfo
postgresql16
postgresql16-plpython
postgresql16-pltcl-debuginfo
postgresql16-plpython-debuginfo
postgresql16-plperl
libecpg6-32bit
libecpg6-debuginfo-32bit
libpq5-32bit
libpq5-debuginfo-32bit
postgresql16-server-devel-debuginfo
postgresql16-docs
libpq5
postgresql16-contrib
postgresql16-mini-debugsource
postgresql16-llvmjit-debuginfo
postgresql16-devel-mini
postgresql16-llvmjit-devel
libecpg6-32bit-debuginfo
libpq5-32bit-debuginfo
postgresql16-llvmjit
postgresql16-test
postgresql16-devel-mini-debuginfo
postgresql-llvmjit
postgresql-llvmjit-devel
IBM Security Guardium
IBM Data Risk Manager
SANnav
IBM Storage Scale System
Juniper Secure Analytics (JSA)
Dell EMC VxRail Appliance
RSA Authentication Manager

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in array modification. A remote user can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.

Install updates from vendor's website.

• https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/