High

Postgresql: extension script @substitutions@ within quoting allow sql injection

Type: advisorySource: Official CVE List1 source record

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

Announced 11 Aug 2023Source revision 1

Original source ↗

CVE-2023-39417

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2023-39417

Red Hat Advanced Cluster Security 4.2

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Security 4.2

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Security 4.2

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Security 4.2

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Advanced Cluster Security 4.2

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.2 Advanced Update Support

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/12/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Source reference: /containers/cna/affected/13/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Source reference: /containers/cna/affected/14/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Source reference: /containers/cna/affected/15/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Source reference: /containers/cna/affected/16/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Extended Update Support

Source reference: /containers/cna/affected/17/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.6 Extended Update Support

Source reference: /containers/cna/affected/18/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Extended Update Support

Source reference: /containers/cna/affected/19/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Extended Update Support

Source reference: /containers/cna/affected/20/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8.8 Extended Update Support

Source reference: /containers/cna/affected/21/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/22/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/23/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.0 Extended Update Support

Source reference: /containers/cna/affected/24/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.2 Extended Update Support

Source reference: /containers/cna/affected/25/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 9.2 Extended Update Support

Source reference: /containers/cna/affected/26/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Software Collections for Red Hat Enterprise Linux 7

Source reference: /containers/cna/affected/27/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Software Collections for Red Hat Enterprise Linux 7

Source reference: /containers/cna/affected/28/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-3.74-RHEL-8

Source reference: /containers/cna/affected/29/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-3.74-RHEL-8

Source reference: /containers/cna/affected/30/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-3.74-RHEL-8

Source reference: /containers/cna/affected/31/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-3.74-RHEL-8

Source reference: /containers/cna/affected/32/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-3.74-RHEL-8

Source reference: /containers/cna/affected/33/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-4.1-RHEL-8

Source reference: /containers/cna/affected/34/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-4.1-RHEL-8

Source reference: /containers/cna/affected/35/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-4.1-RHEL-8

Source reference: /containers/cna/affected/36/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-4.1-RHEL-8

Source reference: /containers/cna/affected/37/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

RHACS-4.1-RHEL-8

Source reference: /containers/cna/affected/38/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 6

Source reference: /containers/cna/affected/39/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 7

Source reference: /containers/cna/affected/40/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/41/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Red Hat Software Collections

Source reference: /containers/cna/affected/42/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.2::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4.2",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.2.4-6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.2::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4.2",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.2.4-6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-main-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.2::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4.2",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.2.4-7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-operator-bundle",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.2::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4.2",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.2.4-6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.2::el8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4.2",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.2.4-7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8090020231114113712.a75119d5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8090020231128173330.a75119d5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "8090020231114113548.a75119d5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:15",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.2::appstream",
      "cpe:/a:redhat:rhel_e4s:8.2::appstream",
      "cpe:/a:redhat:rhel_aus:8.2::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8020020231128165246.4cda2c84",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.2::appstream",
      "cpe:/a:redhat:rhel_e4s:8.2::appstream",
      "cpe:/a:redhat:rhel_aus:8.2::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "8020020231128165246.4cda2c84",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.2::appstream",
      "cpe:/a:redhat:rhel_e4s:8.2::appstream",
      "cpe:/a:redhat:rhel_aus:8.2::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "8020020231128165246.4cda2c84",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_aus:8.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8040020231127153301.522a0ee4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_aus:8.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8040020231127154806.522a0ee4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_aus:8.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "8040020231127153301.522a0ee4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_aus:8.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "8040020231127154806.522a0ee4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_aus:8.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "8040020231127153301.522a0ee4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/a:redhat:rhel_aus:8.4::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "8040020231127154806.522a0ee4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:8.6::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8060020231114115246.ad008a3a",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:8.6::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8060020231128165328.ad008a3a",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020231114105206.63b34585",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020231128165335.63b34585",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:8.8::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "8080020231113134015.63b34585",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:15",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::crb",
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:13.13-1.el9_3",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "9030020231120082734.rhel9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:15",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.0::appstream",
      "cpe:/a:redhat:rhel_eus:9.0::crb"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:13.13-1.el9_0",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.2::appstream",
      "cpe:/a:redhat:rhel_eus:9.2::crb"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:13.13-1.el9_2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.2::appstream"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "9020020231115020618.rhel9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "postgresql:15",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_software_collections:3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Software Collections for Red Hat Enterprise Linux 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:12.17-1.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rh-postgresql12-postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_software_collections:3::el7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Software Collections for Red Hat Enterprise Linux 7",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:13.13-1.el7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rh-postgresql13-postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3.74::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-3.74-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.74.8-9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3.74::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-3.74-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.74.8-9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-main-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3.74::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-3.74-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.74.8-7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-operator-bundle",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3.74::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-3.74-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.74.8-9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:3.74::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-3.74-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.74.8-9",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.1::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-4.1-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.1.6-6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.1::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-4.1-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.1.6-6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-main-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.1::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-4.1-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.1.6-6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-operator-bundle",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.1::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-4.1-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.1.6-6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4.1::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHACS-4.1-RHEL-8",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.1.6-6",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "packageName": "postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "packageName": "postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "packageName": "postgresql:10/postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_software_collections:3"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Software Collections",
    "packageName": "rh-postgresql10-postgresql",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  }
]

Related CVEs: CVE-2023-39417
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #4816 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:58:31 GMT
Publisher date: Fri, 11 Aug 2023 12:19:15 GMT

Read the original announcement