CVE-2023-39418

pg_repack: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buff...

CVE-2023-39418 is fixed in 49 products on 1 platform, first by DEBIAN-CVE-2023-39418, released August 11, 2023. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0109
65th percentile

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869) * postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868) * postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417) * postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870) * postgresql: MERGE fails to enforce UPDATE or SELECT row security policies (CVE-2023-39418) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
pg_repack · RHEL 8 0:1.4.8-1.module+el8.9.0+19797+c4ce5969 RHSA-2023:7884 Dec 20, 2023
pg_repack · RHEL 9 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60 RHSA-2023:7785 Dec 13, 2023
pg_repack · almalinux 8 1.4.8-1.module_el8.8.0+3487+43ec1b9f ALSA-2023:7884 Dec 20, 2023
pg_repack · almalinux 9 1.4.8-1.module_el9.2.0+22+09653793 ALSA-2023:7785 Dec 13, 2023
pg_repack · ol 8 0:1.4.8-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
pg_repack · ol 9 0:1.4.8-1.module+el9.2.0+21134+ceb95ed9 ELSA-2023-7785 Dec 13, 2023
pg_repack · rocky 8 0:1.4.8-1.module+el8.9.0+1525+fc91df60 RLSA-2023:7884 Feb 3, 2026
pgaudit · RHEL 8 0:1.7.0-1.module+el8.9.0+19797+c4ce5969 RHSA-2023:7884 Dec 20, 2023
pgaudit · RHEL 9 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 RHSA-2023:7785 Dec 13, 2023
pgaudit · almalinux 8 1.7.0-1.module_el8.8.0+3487+43ec1b9f ALSA-2023:7884 Dec 20, 2023
pgaudit · almalinux 9 1.7.0-1.module_el9.2.0+22+09653793 ALSA-2023:7785 Dec 13, 2023
pgaudit · ol 8 0:1.7.0-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
pgaudit · ol 9 0:1.7.0-1.module+el9.2.0+21134+ceb95ed9 ELSA-2023-7785 Dec 13, 2023
pgaudit · rocky 8 0:1.7.0-1.module+el8.10.0+40056+df351139 RLSA-2023:7884 Feb 3, 2026
pgaudit · rocky 9 0:1.7.0-1.module+el9.5.0+30637+4391fcca RLSA-2023:7785 Jan 9, 2024
postgres-decoderbufs · RHEL 8 0:1.9.7-1.Final.module+el8.9.0+19797+c4ce5969 RHSA-2023:7884 Dec 20, 2023
postgres-decoderbufs · RHEL 9 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 RHSA-2023:7785 Dec 13, 2023
postgres-decoderbufs · almalinux 8 1.9.7-1.Final.module_el8.8.0+3487+43ec1b9f ALSA-2023:7884 Dec 20, 2023
postgres-decoderbufs · almalinux 9 1.9.7-1.Final.module_el9.2.0+22+09653793 ALSA-2023:7785 Dec 13, 2023
postgres-decoderbufs · ol 8 0:1.9.7-1.Final.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgres-decoderbufs · ol 9 0:1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9 ELSA-2023-7785 Dec 13, 2023
postgres-decoderbufs · rocky 8 0:1.9.7-1.Final.module+el8.10.0+40056+df351139 RLSA-2023:7884 Feb 3, 2026
postgres-decoderbufs · rocky 9 0:1.9.7-1.Final.module+el9.5.0+30637+4391fcca RLSA-2023:7785 Jan 9, 2024
postgresql · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-15 · Debian 12.15 (bookworm) 15.5-0+deb12u1 DEBIAN-CVE-2023-39418 Aug 11, 2023
postgresql-contrib · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-contrib · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-contrib · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-contrib · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-contrib · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-contrib · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-docs · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-docs · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-docs · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-docs · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-docs · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-docs · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-plperl · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-plperl · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-plperl · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-plperl · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-plperl · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-plperl · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-plpython3 · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-plpython3 · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-plpython3 · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-plpython3 · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-plpython3 · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-plpython3 · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-pltcl · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-pltcl · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-pltcl · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-pltcl · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-pltcl · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-pltcl · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-private-devel · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-private-devel · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-private-devel · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-private-devel · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-private-devel · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-private-devel · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-private-libs · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-private-libs · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-private-libs · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-private-libs · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-private-libs · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-private-libs · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-server · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-server · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-server · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-server · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-server · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-server · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-server-devel · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-server-devel · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-server-devel · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-server-devel · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-server-devel · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-server-devel · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-static · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-static · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-static · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-static · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-static · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-static · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-test · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-test · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-test · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-test · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-test · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-test · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-test-rpm-macros · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-test-rpm-macros · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-test-rpm-macros · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-test-rpm-macros · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-test-rpm-macros · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-test-rpm-macros · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-upgrade · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-upgrade · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-upgrade · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-upgrade · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-upgrade · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-upgrade · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql-upgrade-devel · RHEL 8 0:15.5-1.module+el8.9.0+20663+03952ce4 RHSA-2023:7884 Dec 20, 2023
postgresql-upgrade-devel · RHEL 9 0:15.5-1.module+el9.2.0.z+20667+a2d2a8a9 RHSA-2023:7785 Dec 13, 2023
postgresql-upgrade-devel · almalinux 8 15.5-1.module_el8.9.0+3706+885c732e ALSA-2023:7884 Dec 20, 2023
postgresql-upgrade-devel · almalinux 9 15.5-1.module_el9.3.0+52+21733919 ALSA-2023:7785 Dec 13, 2023
postgresql-upgrade-devel · ol 8 0:15.5-1.module+el8.9.0+90110+d8a562d5 ELSA-2023-7884 Dec 20, 2023
postgresql-upgrade-devel · ol 9 0:15.5-1.module+el9.3.0+90103+1d024772 ELSA-2023-7785 Dec 13, 2023
postgresql15 · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-contrib · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-contrib-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-debugsource · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-docs · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-docs-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-llvmjit · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-llvmjit-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-plperl · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-plperl-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-plpython3 · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-plpython3-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-pltcl · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-pltcl-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-private-devel · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-private-libs · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-private-libs-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-server · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-server-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-server-devel · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-server-devel-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-static · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-test · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-test-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-test-rpm-macros · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-upgrade · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-upgrade-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-upgrade-devel · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023
postgresql15-upgrade-devel-debuginfo · amzn 2023 15.4-1.amzn2023.0.1 ALAS2023-2023-387 Oct 12, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.