CVE-2023-5869

Postgresql: buffer overrun from integer overflow in array modification

Description

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

Source: BSI_CSAF BSI OSV NVD CVELISTV5

Metrics

Severity

high

103.34

—

no public PoC known

8.8

Source: nvd-v3

CVSS v3

8.8

CVSS v4

—

EPSS percentile

90.6 %

Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).

EPSS score

4.3 %

Moderate — model estimates 1-10% exploitation likelihood.

Published

2024-03-06 11:02 UTC

CWE

CWE-190

Weakness classes (CWE)

CWE-190Base
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
cwe.mitre.org →

Affected operating systems

linux
redhat / enterprise_linux8.0
linux
redhat / enterprise_linux9.0
linux
redhat / enterprise_linux_desktop7.0
linux
redhat / enterprise_linux_eus8.6
linux
redhat / enterprise_linux_eus8.8
linux
redhat / enterprise_linux_eus9.0
linux
redhat / enterprise_linux_eus9.2
linux
redhat / enterprise_linux_for_arm_648.0
linux
redhat / enterprise_linux_for_arm_648.8_aarch64
linux
redhat / enterprise_linux_for_ibm_z_systems7.0_s390x
linux
redhat / enterprise_linux_for_ibm_z_systems8.0_s390x
linux
redhat / enterprise_linux_for_ibm_z_systems_eus8.6_s390x
linux
redhat / enterprise_linux_for_ibm_z_systems_eus8.8_s390x
linux
redhat / enterprise_linux_for_ibm_z_systems_eus9.0_s390x
linux
redhat / enterprise_linux_for_ibm_z_systems_eus9.2_s390x
linux
redhat / enterprise_linux_for_power_big_endian7.0_ppc64
linux
redhat / enterprise_linux_for_power_little_endian7.0_ppc64le
linux
redhat / enterprise_linux_for_power_little_endian8.0_ppc64le
linux
redhat / enterprise_linux_for_power_little_endian_eus8.6_ppc64le
linux
redhat / enterprise_linux_for_power_little_endian_eus8.8_ppc64le
linux
redhat / enterprise_linux_for_power_little_endian_eus9.0_ppc64le
linux
redhat / enterprise_linux_for_power_little_endian_eus9.2_ppc64le
linux
redhat / enterprise_linux_for_scientific_computing7.0
linux
redhat / enterprise_linux_server7.0

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

bitnami
postgresql11.0.0
bitnami
postgresql12.0.0
bitnami
postgresql13.0.0
bitnami
postgresql14.0.0
bitnami
postgresql15.0.0
bitnami
postgresql16.0.0

References & sources

IDCVE-2023-5869