Lucene search
GoogleOSV:ALSA-2023:4327HistoryJul 31, 2023 - 12:00 a.m.
Moderate: postgresql:15 security update
2023-07-3100:00:00
Google
osv.dev
18
postgresql
security update
object-relational database
cve-2023-2454
cve-2023-2455
schema_element
row security policies
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
68.8%
PostgreSQL is an advanced object-relational database management system (DBMS).
Security Fix(es):
- postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)
- postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2199-1)
2023-05-16 00:00:00
Debian: Security Advisory (DLA-3422-1)
2023-05-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2201-1)
2023-05-16 00:00:00
nessus
nessus
SUSE SLES12 Security Update : postgresql13 (SUSE-SU-2023:2201-1)
2023-05-16 00:00:00
SUSE SLES15 Security Update : postgresql12 (SUSE-SU-2023:2198-1)
2023-05-16 00:00:00
Amazon Linux 2 : postgresql (ALASPOSTGRESQL11-2023-001)
2023-09-27 00:00:00
almalinux
almalinux
Moderate: postgresql:15 security update
2023-07-31 00:00:00
Moderate: postgresql:10 security update
2023-08-08 00:00:00
Moderate: postgresql:15 security update
2023-09-19 00:00:00
osv
osv
Moderate: postgresql:13 security update
2023-10-06 23:10:12
Moderate: postgresql security update
2023-08-31 16:55:40
Moderate: postgresql:10 security update
2023-08-08 00:00:00
debian
debian
[SECURITY] [DSA 5401-1] postgresql-13 security update
2023-05-11 16:36:32
[SECURITY] [DLA 3422-1] postgresql-11 security update
2023-05-15 09:06:12
cloudfoundry
cloudfoundry
USN-6104-1: PostgreSQL vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
rocky
rocky
postgresql:10 security update
2023-08-28 18:40:52
postgresql security update
2023-08-31 16:55:40
postgresql:15 security update
2023-08-08 12:35:00
oraclelinux
oraclelinux
postgresql security update
2023-06-22 00:00:00
postgresql:15 security update
2023-09-20 00:00:00
15 security update
2023-08-02 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2023-05-31 09:41:32
ubuntu
ubuntu
PostgreSQL vulnerabilities
2023-05-24 00:00:00
PostgreSQL vulnerability
2023-07-13 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2023:4327) Moderate: postgresql:15 security update
2023-07-31 08:41:19
(RHSA-2023:4539) Moderate: postgresql:10 security update
2023-08-08 07:21:47
(RHSA-2023:4527) Moderate: postgresql:13 security update
2023-08-08 07:21:35
kaspersky
kaspersky
KLA49176 Multiple vulnerabilities in PostgreSQL
2023-05-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2359
2024-02-27 09:01:10
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0394
2023-05-19 00:00:00
ubuntucve
ubuntucve
CVE-2023-2454
2023-05-12 00:00:00
CVE-2023-2455
2023-05-12 00:00:00
prion
prion
Code injection
2023-06-09 19:15:00
Code injection
2023-06-09 19:15:00
cve
cve
CVE-2023-2454
2023-06-09 19:15:09
CVE-2023-2455
2023-06-09 19:15:09
cvelist
cvelist
CVE-2023-2454
2023-06-09 00:00:00
CVE-2023-2455
2023-06-09 00:00:00
debiancve
debiancve
CVE-2023-2454
2023-06-09 19:15:09
CVE-2023-2455
2023-06-09 19:15:09
veracode
veracode
Arbitrary Code Execution
2023-06-07 01:36:40
Information Disclosure
2023-06-07 01:36:32
alpinelinux
alpinelinux
CVE-2023-2454
2023-06-09 19:15:09
CVE-2023-2455
2023-06-09 19:15:09
amazon
amazon
Important: postgresql
2024-02-15 03:52:00
Important: postgresql92
2023-06-05 16:39:00
freebsd
freebsd
redhatcve
redhatcve
nvd
nvd
CVE-2023-2454
2023-06-09 19:15:09
CVE-2023-2455
2023-06-09 19:15:09
redos
redos
ROS-20240329-12
2024-03-29 00:00:00
ROS-20240329-11
2024-03-29 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
68.8%
Related for OSV:ALSA-2023:4327