CVE-2023-2454
EUVD-2023-3393909.06.2023, 19:15
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| postgresql | postgresql | 11.0 ≤ 𝑥 < 11.20 |
| postgresql | postgresql | 12.0 ≤ 𝑥 < 12.15 |
| postgresql | postgresql | 13.0 ≤ 𝑥 < 13.11 |
| postgresql | postgresql | 14.0 ≤ 𝑥 < 14.8 |
| postgresql | postgresql | 15.0 ≤ 𝑥 < 15.3 |
| redhat | software_collections | - |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| postgresql |
| ||||||||||||||||||||
| postgresql-10 |
| ||||||||||||||||||||
| postgresql-12 |
| ||||||||||||||||||||
| postgresql-14 |
| ||||||||||||||||||||
| postgresql-15 |
| ||||||||||||||||||||
| postgresql-9.1 |
| ||||||||||||||||||||
| postgresql-9.3 |
| ||||||||||||||||||||
| postgresql-9.5 |
|
Common Weakness Enumeration
References