CVE-2024-7348

EUVD-2024-48286

08.08.2024, 13:15

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.

TOCTOU

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 73%

Affected Products (NVD)

Vendor	Product	Version
postgresql	postgresql	12.0 ≤ 𝑥 < 12.20
postgresql	postgresql	13.0 ≤ 𝑥 < 13.16
postgresql	postgresql	14.0 ≤ 𝑥 < 14.13
postgresql	postgresql	15.0 ≤ 𝑥 < 15.8
postgresql	postgresql	16.0 ≤ 𝑥 < 16.4

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
postgresql	postgresql	𝑥 < 12.20	ADP
postgresql	postgresql	13 ≤ 𝑥 < 13.16	ADP
postgresql	postgresql	14 ≤ 𝑥 < 14.13	ADP
postgresql	postgresql	15 ≤ 𝑥 < 15.8	ADP
postgresql	postgresql	16 ≤ 𝑥 < 16.4	ADP

Debian Releases

Debian Product

Codename

postgresql-13

bullseye	13.16-0+deb11u1 fixed
bullseye (security)	13.23-0+deb11u1 fixed

postgresql-15

bookworm	15.14-0+deb12u1 fixed
bookworm (security)	15.10-0+deb12u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

postgresql-16

focal	dne
jammy	dne
noble	Fixed 16.4-0ubuntu0.24.04.1 released
oracular	not-affected

postgresql-14

focal	dne
jammy	Fixed 14.13-0ubuntu0.22.04.1 released
noble	dne
oracular	dne

postgresql-12

focal	Fixed 12.20-0ubuntu0.20.04.1 released
jammy	dne
noble	dne
oracular	dne

postgresql-10

bionic	Fixed 10.23-0ubuntu0.18.04.2+esm2 released
focal	dne
jammy	dne
noble	dne
oracular	dne

postgresql-9.5

focal	dne
jammy	dne
noble	dne
oracular	dne
xenial	Fixed 9.5.25-0ubuntu0.16.04.1+esm8 released

postgresql-9.3

focal	dne
jammy	dne
noble	dne
oracular	dne
trusty	Fixed 9.3.24-0ubuntu0.14.04+esm1 released

postgresql-9.1

focal	dne
jammy	dne
noble	dne
oracular	dne

openSUSE / SLES Releases

openSUSE Product

Release

libecpg6

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP7	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP2	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP3	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 15 SP7	16.4-150600.16.5.1 fixed

libecpg6-32bit

suse enterprise server 12 SP3

16.4-3.16.1

fixed

libpq5

suse enterprise desktop 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise desktop 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise desktop 15 SP7	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP7	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP2	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP3	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 15 SP7	16.4-150600.16.5.1 fixed

libpq5-32bit

suse enterprise desktop 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise desktop 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise desktop 15 SP7	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP7	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP2	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 15 SP7	16.4-150600.16.5.1 fixed

postgresql12

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql12-contrib

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql12-devel

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql12-docs

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql12-llvmjit-devel

suse enterprise server 12 SP3

12.20-3.58.1

fixed

postgresql12-plperl

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql12-plpython

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql12-pltcl

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql12-server

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql12-server-devel

suse enterprise server 12 SP3	12.20-3.58.1 fixed
suse enterprise server 15 SP2	12.20-150200.8.63.1 fixed
suse enterprise server 15 SP3	12.20-150200.8.63.1 fixed

postgresql13

suse enterprise server 12 SP3	13.16-3.52.1 fixed
suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql13-contrib

suse enterprise server 12 SP3	13.16-3.52.1 fixed
suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql13-devel

suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql13-docs

suse enterprise server 12 SP3	13.16-3.52.1 fixed
suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql13-llvmjit

suse enterprise server 15 SP4

13.16-150200.5.61.1

fixed

postgresql13-llvmjit-devel

suse enterprise server 15 SP4

13.16-150200.5.61.1

fixed

postgresql13-plperl

suse enterprise server 12 SP3	13.16-3.52.1 fixed
suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql13-plpython

suse enterprise server 12 SP3	13.16-3.52.1 fixed
suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql13-pltcl

suse enterprise server 12 SP3	13.16-3.52.1 fixed
suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql13-server

suse enterprise server 12 SP3	13.16-3.52.1 fixed
suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql13-server-devel

suse enterprise server 15 SP2	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP3	13.16-150200.5.61.1 fixed
suse enterprise server 15 SP4	13.16-150200.5.61.1 fixed

postgresql14

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql14-contrib

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql14-devel

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql14-docs

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql14-llvmjit

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed

postgresql14-llvmjit-devel

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed

postgresql14-plperl

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql14-plpython

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql14-pltcl

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql14-server

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql14-server-devel

suse enterprise sap 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise sap 15 SP6	14.13-150600.16.6.1 fixed
suse enterprise server 12 SP3	14.13-3.44.1 fixed
suse enterprise server 15 SP2	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP3	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP4	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP5	14.13-150200.5.47.1 fixed
suse enterprise server 15 SP6	14.13-150600.16.6.1 fixed

postgresql15

suse enterprise desktop 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise sap 15 SP7	15.8-150600.16.6.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 15 SP7	15.8-150600.16.6.1 fixed

postgresql15-contrib

suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise sap 15 SP7	15.8-150600.16.6.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 15 SP7	15.8-150600.16.6.1 fixed

postgresql15-devel

suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise sap 15 SP7	15.12-150600.16.14.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 15 SP7	15.12-150600.16.14.1 fixed

postgresql15-docs

suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed

postgresql15-plperl

suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed

postgresql15-plpython

suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed

postgresql15-pltcl

suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed

postgresql15-server

suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise sap 15 SP7	15.8-150600.16.6.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 15 SP7	15.8-150600.16.6.1 fixed

postgresql15-server-devel

suse enterprise sap 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise sap 15 SP6	15.8-150600.16.6.1 fixed
suse enterprise server 12 SP3	15.8-3.28.1 fixed
suse enterprise server 15 SP3	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP4	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP5	15.8-150200.5.30.1 fixed
suse enterprise server 15 SP6	15.8-150600.16.6.1 fixed

postgresql16

suse enterprise desktop 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise desktop 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP7	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 15 SP7	16.4-150600.16.5.1 fixed

postgresql16-contrib

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP7	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 15 SP7	16.4-150600.16.5.1 fixed

postgresql16-devel

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP7	16.8-150600.16.15.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 15 SP7	16.8-150600.16.15.1 fixed

postgresql16-docs

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed

postgresql16-plperl

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed

postgresql16-plpython

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed

postgresql16-pltcl

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed

postgresql16-server

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise sap 15 SP7	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 15 SP7	16.4-150600.16.5.1 fixed

postgresql16-server-devel

suse enterprise sap 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise sap 15 SP6	16.4-150600.16.5.1 fixed
suse enterprise server 12 SP3	16.4-3.16.1 fixed
suse enterprise server 15 SP4	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP5	16.4-150200.5.16.1 fixed
suse enterprise server 15 SP6	16.4-150600.16.5.1 fixed

postgresql17

suse enterprise desktop 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-contrib

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-devel

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-docs

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-plperl

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-plpython

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-pltcl

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-server

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

postgresql17-server-devel

suse enterprise sap 15 SP7	17.4-150600.13.10.1 fixed
suse enterprise server 15 SP7	17.4-150600.13.10.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

postgresql

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-contrib

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-docs

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-plperl

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-plpython3

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-pltcl

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-private-devel

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-private-libs

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-server

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-server-devel

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-static

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-test

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-upgrade

RHEL 9

0:13.16-1.el9_4

fixed

postgresql-upgrade-devel

RHEL 9

0:13.16-1.el9_4

fixed

Common Weakness Enumeration

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
The software checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the software to perform invalid actions when the resource is in an unexpected state.

References

https://www.postgresql.org/support/security/CVE-2024-7348/

http://www.openwall.com/lists/oss-security/2024/08/11/1

https://security.netapp.com/advisory/ntap-20240822-0002/