CVE-2023-5869: postgresql Integer Overflow or Wraparound

CVSS: 8.8v3.1HighModified

AliasesALPINE-CVE-2023-5869RHSA-2023:7771RHSA-2023:7778+18 more

Published 10-12-2023Last modified 11-03-2026

Vulnerability summary

CVE-2023-5869 is a high (CVSS 8.8) Integer Overflow or Wraparound vulnerability in postgresql. EPSS estimates a 4.32% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities.

Overall risk

36/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (CVE.org)

EPSS score

4.32%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 41 · Related 26

Timeline

10-12-2023
PublishedVulnerability first disclosed.
11-03-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

CVSS metrics

8 scores · 8 sources · 1 version

v3.18.8

EPSS trend

Probability

4.32%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.32% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.32%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected systems

Redhat63 products

codeready_linux_builder_eus9.2
codeready_linux_builder_eus_for_power_little_endian_eus9.0_ppc64le | 9.2_ppc64le
codeready_linux_builder_for_arm64_eus8.6_aarch64 | 9.0_aarch64 | 9.2_aarch64
codeready_linux_builder_for_ibm_z_systems_eus9.0_s390x | 9.2_s390x
codeready_linux_builder_for_power_little_endian_eus9.0_ppc64le | 9.2_ppc64le

enterprise_linux8.0 | 9.0
enterprise_linux_desktop7.0
enterprise_linux_eus8.6 | 8.8 | 9.0 | 9.2
enterprise_linux_for_arm_648.0 | 8.8_aarch64
enterprise_linux_for_ibm_z_systems7.0_s390x | 8.0_s390x
enterprise_linux_for_ibm_z_systems_eus8.6_s390x | 8.8_s390x | 9.0_s390x | 9.2_s390x
enterprise_linux_for_power_big_endian7.0_ppc64
enterprise_linux_for_power_little_endian7.0_ppc64le | 8.0_ppc64le
enterprise_linux_for_power_little_endian_eus8.6_ppc64le | 8.8_ppc64le | 9.0_ppc64le | 9.2_ppc64le
enterprise_linux_for_scientific_computing7.0
enterprise_linux_server7.0
enterprise_linux_server_aus8.2 | 8.4 | 8.6 | 9.2
enterprise_linux_server_tus8.2 | 8.4 | 8.6
enterprise_linux_workstation7.0
software_collections1.0
postgresql< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-contrib< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-contrib-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-debugsource< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-devel< 0:9.2.24-9.el7_9
postgresql-docs< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-docs-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-libs< 0:9.2.24-9.el7_9
postgresql-plperl< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-plperl-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-plpython< 0:9.2.24-9.el7_9
postgresql-plpython3< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-plpython3-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-pltcl< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-pltcl-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-server< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-server-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-server-devel< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-server-devel-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-static< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-test< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-test-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-test-rpm-macros< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-upgrade< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:9.2.24-9.el7_9 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-upgrade-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-upgrade-devel< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
postgresql-upgrade-devel-debuginfo< 0:10.21-3.module+el8.1.0+20812+774a9597 | < 0:10.23-3.module+el8.8.0+20830+539934c1 | < 0:10.21-3.module+el8.2.0+20828+77647308 | < 0:10.21-3.module+el8.6.0+20829+33f4a2c9 | < 0:10.23-3.module+el8.9.0+20831+78489779 | < 0:10.21-3.module+el8.4.0+20772+e1ad5372
rh-postgresql10-postgresql< 0:10.23-2.el7
rh-postgresql10-postgresql-contrib< 0:10.23-2.el7
rh-postgresql10-postgresql-contrib-syspaths< 0:10.23-2.el7
rh-postgresql10-postgresql-debuginfo< 0:10.23-2.el7
rh-postgresql10-postgresql-devel< 0:10.23-2.el7
rh-postgresql10-postgresql-docs< 0:10.23-2.el7
rh-postgresql10-postgresql-libs< 0:10.23-2.el7
rh-postgresql10-postgresql-plperl< 0:10.23-2.el7
rh-postgresql10-postgresql-plpython< 0:10.23-2.el7
rh-postgresql10-postgresql-pltcl< 0:10.23-2.el7
rh-postgresql10-postgresql-server< 0:10.23-2.el7
rh-postgresql10-postgresql-server-syspaths< 0:10.23-2.el7
rh-postgresql10-postgresql-static< 0:10.23-2.el7
rh-postgresql10-postgresql-syspaths< 0:10.23-2.el7
rh-postgresql10-postgresql-test< 0:10.23-2.el7

Show all 63

Chainguard5 products

postgresql-12< 12.17-r0
postgresql-13< 13.13-r0
postgresql-14< 14.10-r0
postgresql-15< 15.5-r0
postgresql-16< 16.1-r0

Ubuntu5 products

postgresql-10< 10.23-0ubuntu0.18.04.2+esm1
postgresql-12< 12.17-0ubuntu0.20.04.1
postgresql-14< 14.10-0ubuntu0.22.04.1
postgresql-9.3All versions (No fix recorded)
postgresql-9.5< 9.5.25-0ubuntu0.16.04.1+esm6

Wolfi5 products

postgresql-12< 12.17-r0
postgresql-13< 13.13-r0
postgresql-14< 14.10-r0
postgresql-15< 15.5-r0
postgresql-16< 16.1-r0

Alpine3 products

postgresql14< 14.10-r0
postgresql15< 15.5-r0
postgresql16< 16.1-r0

Debian1 product

postgresql-15< 15.5-0+deb12u1

Postgresql1 product

postgresql≥ 11.0, < 11.22 | ≥ 12.0, < 12.17 | ≥ 13.0, < 13.13 | ≥ 14.0, < 14.10 | ≥ 15.0, < 15.5 | 16.0

7 vendors · 83 products

References

53 links

access.redhat.com/errata/RHSA-2023:7545Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7579Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7580Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7581Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7616Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7656Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7666Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7667Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7694Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7695Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory

Show all 53 references

access.redhat.com/errata/RHSA-2023:7714Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7770Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7771Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7772Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7778Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7783Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
access.redhat.com/errata/RHSA-2023:7784Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7785Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7786Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7788Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7789Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7790Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7878Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7883Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7884Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2023:7885Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:0304Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:0332Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:0337Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/security/cve/CVE-2023-5869VDB EntryX Refsource REDHATREPORTAdvisoryThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=2247169Issue TrackingX Refsource REDHATREPORT
www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/ARTICLEREPORTAdvisoryRelease Notes
www.postgresql.org/support/security/CVE-2023-5869/ARTICLEREPORTAdvisoryVendor Advisory
security.netapp.com/advisory/ntap-20240119-0003/X TransferredAdvisory
lists.debian.org/debian-lts-announce/2023/11/msg00007.htmlWEB
security.alpinelinux.org/vuln/CVE-2023-5869Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7771.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2023-5869AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2023-5869AdvisoryOval
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7778.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7783.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7786.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7788.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7789.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7790.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7878.jsonAdvisory
ubuntu.com/security/CVE-2023-5869REPORT
git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=c48008f599fd0e3bca2923ff5b40b559ae1e4e2eREPORT
ubuntu.com/security/notices/USN-6538-1Advisory
ubuntu.com/security/notices/USN-6570-1Advisory
ubuntu.com/security/notices/USN-6538-2Advisory
security-tracker.debian.org/tracker/CVE-2023-5869Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities