CVE-2024-0985

EUVD-2024-16762

08.02.2024, 13:15

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 73%

Affected Products (NVD)

Vendor	Product	Version
postgresql	postgresql	12.0 ≤ 𝑥 < 12.18
postgresql	postgresql	13.0 ≤ 𝑥 < 13.14
postgresql	postgresql	14.0 ≤ 𝑥 < 14.11
postgresql	postgresql	15.0 ≤ 𝑥 < 15.6

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

postgresql-13

bullseye	13.16-0+deb11u1 fixed
bullseye (security)	13.23-0+deb11u1 fixed

postgresql-15

bookworm	15.14-0+deb12u1 fixed
bookworm (security)	15.10-0+deb12u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

postgresql-16

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	Fixed 16.2-1 released
oracular	Fixed 16.2-1 released
plucky	dne
questing	dne
trusty	dne
xenial	dne

postgresql-15

bionic	dne
focal	dne
jammy	dne
mantic	Fixed 15.6-0ubuntu0.23.10.1 released
noble	dne
oracular	dne
plucky	dne
questing	dne
trusty	dne
xenial	dne

postgresql-14

bionic	dne
focal	dne
jammy	Fixed 14.11-0ubuntu0.22.04.1 released
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
trusty	dne
xenial	dne

postgresql-12

bionic	dne
focal	Fixed 12.18-0ubuntu0.20.04.1 released
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
trusty	ignored
xenial	dne

postgresql-10

bionic	needs-triage
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
trusty	dne
xenial	dne

postgresql-9.5

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
trusty	dne
xenial	Fixed 9.5.25-0ubuntu0.16.04.1+esm7 released

postgresql-9.3

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
trusty	deferred
xenial	dne

postgresql-9.1

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
trusty	ignored
xenial	dne

openSUSE / SLES Releases

openSUSE Product

Release

libecpg6

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP2	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP3	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

libecpg6-32bit

suse enterprise server 12 SP3

16.2-3.10.1

fixed

libpq5

suse enterprise desktop 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise desktop 15 SP6	16.2-150600.14.11 fixed
suse enterprise desktop 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise sap 15 SP6	16.2-150600.14.11 fixed
suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP2	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP3	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP6	16.2-150600.14.11 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

libpq5-32bit

suse enterprise desktop 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise desktop 15 SP6	16.2-150600.14.11 fixed
suse enterprise desktop 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise sap 15 SP6	16.2-150600.14.11 fixed
suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP2	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP6	16.2-150600.14.11 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql12

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql12-contrib

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql12-devel

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql12-docs

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql12-llvmjit-devel

suse enterprise server 12 SP3

12.18-3.52.1

fixed

postgresql12-plperl

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql12-plpython

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql12-pltcl

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql12-server

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql12-server-devel

suse enterprise server 12 SP3	12.18-3.52.1 fixed
suse enterprise server 15 SP2	12.18-150200.8.57.1 fixed
suse enterprise server 15 SP3	12.18-150200.8.57.1 fixed

postgresql13

suse enterprise server 12 SP3	13.14-3.46.1 fixed
suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql13-contrib

suse enterprise server 12 SP3	13.14-3.46.1 fixed
suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql13-devel

suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql13-docs

suse enterprise server 12 SP3	13.14-3.46.1 fixed
suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql13-llvmjit

suse enterprise server 15 SP4

13.14-150200.5.53.1

fixed

postgresql13-llvmjit-devel

suse enterprise server 15 SP4

13.14-150200.5.53.1

fixed

postgresql13-plperl

suse enterprise server 12 SP3	13.14-3.46.1 fixed
suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql13-plpython

suse enterprise server 12 SP3	13.14-3.46.1 fixed
suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql13-pltcl

suse enterprise server 12 SP3	13.14-3.46.1 fixed
suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql13-server

suse enterprise server 12 SP3	13.14-3.46.1 fixed
suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql13-server-devel

suse enterprise server 15 SP2	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP3	13.14-150200.5.53.1 fixed
suse enterprise server 15 SP4	13.14-150200.5.53.1 fixed

postgresql14

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-contrib

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-devel

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-docs

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-llvmjit

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-llvmjit-devel

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-plperl

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-plpython

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-pltcl

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-server

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql14-server-devel

suse enterprise sap 15 SP5	14.11-150200.5.39.1 fixed
suse enterprise server 12 SP3	14.11-3.36.1 fixed
suse enterprise server 15 SP2	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP3	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP4	14.11-150200.5.39.1 fixed
suse enterprise server 15 SP5	14.11-150200.5.39.1 fixed

postgresql15

suse enterprise desktop 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise sap 15 SP6	15.6-150600.14.4 fixed
suse enterprise sap 15 SP7	15.12-150600.16.14.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP6	15.6-150600.14.4 fixed
suse enterprise server 15 SP7	15.12-150600.16.14.1 fixed

postgresql15-contrib

suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise sap 15 SP6	15.6-150600.14.4 fixed
suse enterprise sap 15 SP7	15.12-150600.16.14.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP6	15.6-150600.14.4 fixed
suse enterprise server 15 SP7	15.12-150600.16.14.1 fixed

postgresql15-devel

suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise sap 15 SP7	15.12-150600.16.14.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP7	15.12-150600.16.14.1 fixed

postgresql15-docs

suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed

postgresql15-plperl

suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed

postgresql15-plpython

suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed

postgresql15-pltcl

suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed

postgresql15-server

suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise sap 15 SP6	15.6-150600.14.4 fixed
suse enterprise sap 15 SP7	15.12-150600.16.14.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP6	15.6-150600.14.4 fixed
suse enterprise server 15 SP7	15.12-150600.16.14.1 fixed

postgresql15-server-devel

suse enterprise sap 15 SP5	15.6-150200.5.22.1 fixed
suse enterprise server 12 SP3	15.6-3.22.1 fixed
suse enterprise server 15 SP3	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP4	15.6-150200.5.22.1 fixed
suse enterprise server 15 SP5	15.6-150200.5.22.1 fixed

postgresql16

suse enterprise desktop 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise desktop 15 SP6	16.2-150600.14.11 fixed
suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise sap 15 SP6	16.2-150600.14.11 fixed
suse enterprise sap 15 SP7	16.8-150600.16.15.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP6	16.2-150600.14.11 fixed
suse enterprise server 15 SP7	16.8-150600.16.15.1 fixed

postgresql16-contrib

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise sap 15 SP7	16.8-150600.16.15.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP7	16.8-150600.16.15.1 fixed

postgresql16-devel

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise sap 15 SP7	16.8-150600.16.15.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP7	16.8-150600.16.15.1 fixed

postgresql16-docs

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed

postgresql16-plperl

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed

postgresql16-plpython

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed

postgresql16-pltcl

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed

postgresql16-server

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise sap 15 SP7	16.8-150600.16.15.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP7	16.8-150600.16.15.1 fixed

postgresql16-server-devel

suse enterprise sap 15 SP5	16.2-150200.5.10.1 fixed
suse enterprise server 12 SP3	16.2-3.10.1 fixed
suse enterprise server 15 SP4	16.2-150200.5.10.1 fixed
suse enterprise server 15 SP5	16.2-150200.5.10.1 fixed

postgresql17

suse enterprise desktop 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-contrib

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-devel

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-docs

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-plperl

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-plpython

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-pltcl

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-server

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-server-devel

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

postgresql

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-contrib

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-docs

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-plperl

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-plpython3

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-pltcl

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-private-devel

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-private-libs

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-server

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-server-devel

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-static

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-test

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-upgrade

RHEL 9

0:13.14-1.el9_3

fixed

postgresql-upgrade-devel

RHEL 9

0:13.14-1.el9_3

fixed

Common Weakness Enumeration

CWE-271 - Privilege Dropping / Lowering Errors
The software does not drop privileges before passing control of a resource to an actor that does not have those privileges.

References

https://lists.debian.org/debian-lts-announce/2024/03/msg00017.html

https://saites.dev/projects/personal/postgres-cve-2024-0985/

https://www.postgresql.org/support/security/CVE-2024-0985/

https://lists.debian.org/debian-lts-announce/2024/03/msg00017.html

https://saites.dev/projects/personal/postgres-cve-2024-0985/

https://security.netapp.com/advisory/ntap-20241220-0005/

https://www.postgresql.org/support/security/CVE-2024-0985/