CVE-2023-2454
published 2023-06-09CVE-2023-2454: schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated…
PriorityP343high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
1.19%
64.7th percentile
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | postgresql-13 | < postgresql-13 13.11-0+deb11u1 (bullseye) | postgresql-13 13.11-0+deb11u1 (bullseye) |
| debian | postgresql-15 | < postgresql-13 13.11-0+deb11u1 (bullseye) | postgresql-13 13.11-0+deb11u1 (bullseye) |
| fedoraproject | fedora | — | — |
| postgresql | postgresql | — | — |
| postgresql | postgresql | >= 11.0 < 11.20 | 11.20 |
| postgresql | postgresql | >= 12.0 < 12.15 | 12.15 |
| postgresql | postgresql | >= 13.0 < 13.11 | 13.11 |
| postgresql | postgresql | >= 14.0 < 14.8 | 14.8 |
| postgresql | postgresql | >= 15.0 < 15.3 | 15.3 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
osv7.2HIGH
vendor_debian7.2HIGH
vendor_redhat7.2HIGH
vendor_ubuntu7.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SINEC NMS
cisa_ics·2024-02-15
Siemens SINEC NMS
ICS Advisory
##
Siemens SINEC NMS
Release DateFebruary 15, 2024
Alert CodeICSA-24-046-15
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SINEC NMS
- Vulnerabilities: Out-of-bounds Read, Inadequate Encryption Strength, Double Free, Use After Free, NULL Pointer Dereference, Improper Input Validation, Missing Encryption of Sensitive Data, Allocation of Resources Wit
Ubuntu
PostgreSQL vulnerability
vendor_ubuntu·2023-07-13
CVE-2023-2454 PostgreSQL vulnerability
Title: PostgreSQL vulnerability
Summary: PostgreSQL could be made to run code with elevated privileges.
Alexander Lakhin discovered that PostgreSQL incorrectly handled certain
CREATE privileges. An authenticated user could possibly use this issue to
execute arbitrary code as the bootstrap supervisor.
Instructions: After a standard system update you need to restart PostgreSQL to
make all the necessary changes.
Ubuntu
PostgreSQL vulnerabilities
vendor_ubuntu·2023-05-24·CVSS 7.2
CVE-2023-2454 [HIGH] PostgreSQL vulnerabilities
Title: PostgreSQL vulnerabilities
Summary: Several security issues were fixed in PostgreSQL.
Alexander Lakhin discovered that PostgreSQL incorrectly handled certain
CREATE privileges. An authenticated user could possibly use this issue to
execute arbitrary code as the bootstrap supervisor. (CVE-2023-2454)
Wolfgang Walther discovered that PostgreSQL incorrectly handled certain row
security policies. An authenticated user could possibly use this issue to
complete otherwise forbidden reads and modifications. (CVE-2023-2455)
Instructions: This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart PostgreSQL to
make all the necessary changes.
Red Hat
postgresql: schema_element defeats protective search_path changes
vendor_redhat·2023-05-11·CVSS 7.2
CVE-2023-2454 [HIGH] CWE-20 postgresql: schema_element defeats protective search_path changes
postgresql: schema_element defeats protective search_path changes
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code.
Statement: The severity for Red Hat Enterprise Linux and Red Hat Software Collections has been set to Moderate because the vulnerability requires an attacker to have database-level CREATE privilege to execute arbitrary code as the bootstrap superuser. As it requires a HIGH privileged user, it reduces the impact of this vulnerability.
Red Hat OpenShift Dev Spaces is not aff
Debian
CVE-2023-2454: postgresql-13 - schema_element defeats protective search_path changes; It was found that certain...
vendor_debian·2023·CVSS 7.2
CVE-2023-2454 [HIGH] CVE-2023-2454: postgresql-13 - schema_element defeats protective search_path changes; It was found that certain...
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
Scope: local
bullseye: resolved (fixed in 13.11-0+deb11u1)
OSV
CVE-2023-2454: schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with ele
osv·2023-06-09·CVSS 7.2
CVE-2023-2454 [HIGH] CVE-2023-2454: schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with ele
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
GHSA
GHSA-9fff-w5w3-5x9g: schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with ele
ghsa_unreviewed·2023-06-09
CVE-2023-2454 [HIGH] CWE-20 GHSA-9fff-w5w3-5x9g: schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with ele
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
OSV
postgresql-10, postgresql-12, postgresql-14, postgresql-15 vulnerabilities
osv·2023-05-24·CVSS 7.2
CVE-2023-2454 [HIGH] postgresql-10, postgresql-12, postgresql-14, postgresql-15 vulnerabilities
postgresql-10, postgresql-12, postgresql-14, postgresql-15 vulnerabilities
Alexander Lakhin discovered that PostgreSQL incorrectly handled certain
CREATE privileges. An authenticated user could possibly use this issue to
execute arbitrary code as the bootstrap supervisor. (CVE-2023-2454)
Wolfgang Walther discovered that PostgreSQL incorrectly handled certain row
security policies. An authenticated user could possibly use this issue to
complete otherwise forbidden reads and modifications. (CVE-2023-2455)
No detection rules found.
No public exploits indexed.
https://access.redhat.com/security/cve/CVE-2023-2454https://security.netapp.com/advisory/ntap-20230706-0006/https://www.postgresql.org/support/security/CVE-2023-2454/https://access.redhat.com/security/cve/CVE-2023-2454https://security.netapp.com/advisory/ntap-20230706-0006/https://www.postgresql.org/support/security/CVE-2023-2454/
2023-06-09
Published