CVE-2024-10979: postgresql

CVSS: 8.8v3.1HighModified

AliasesALPINE-CVE-2024-10979RHSA-2024:10593RHSA-2024:10595+30 more

Published 14-11-2024Last modified 03-11-2025

Vulnerability summary

CVE-2024-10979 is a high (CVSS 8.8) vulnerability in postgresql. EPSS estimates a 4.39% chance of exploitation in the next 30 days, higher than 91.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

46/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (CVE.org)

EPSS score

4.39%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1github

Timeline

14-11-2024
PublishedVulnerability first disclosed.
03-11-2025
Last modifiedVulnerability information updated.

Description

Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.

CVSS metrics

8 scores · 8 sources · 1 version

v3.18.8

EPSS trend

Probability

4.39%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.39% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.39%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

githubUnverified
Postgresql Env Vuln
Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Redhat40 products

pg_repack< 0:1.4.8-1.module+el9.4.0+20427+07482b8c | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552 | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.8-1.module+el8.8.0+17071+aaaceaa4
pg_repack-debuginfo< 0:1.4.8-1.module+el9.4.0+20427+07482b8c | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552 | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.8-1.module+el8.8.0+17071+aaaceaa4
pg_repack-debugsource< 0:1.4.8-1.module+el9.4.0+20427+07482b8c | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552 | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.8-1.module+el8.8.0+17071+aaaceaa4
pgaudit< 0:16.0-1.module+el9.4.0+20427+07482b8c | < 0:1.5.0-1.module+el8.4.0+8873+b821c30a | < 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5 | < 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.7.0-1.module+el8.8.0+17071+aaaceaa4
pgaudit-debuginfo< 0:16.0-1.module+el9.4.0+20427+07482b8c | < 0:1.5.0-1.module+el8.4.0+8873+b821c30a | < 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5 | < 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.7.0-1.module+el8.8.0+17071+aaaceaa4

pgaudit-debugsource< 0:16.0-1.module+el9.4.0+20427+07482b8c | < 0:1.5.0-1.module+el8.4.0+8873+b821c30a | < 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5 | < 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.7.0-1.module+el8.8.0+17071+aaaceaa4
postgres-decoderbufs< 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c | < 0:0.10.0-2.module+el8.4.0+8873+b821c30a | < 0:0.10.0-2.module+el8.5.0+11354+78b3c9c5 | < 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | < 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 | < 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 | < 0:1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
postgres-decoderbufs-debuginfo< 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c | < 0:0.10.0-2.module+el8.4.0+8873+b821c30a | < 0:0.10.0-2.module+el8.5.0+11354+78b3c9c5 | < 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | < 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 | < 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 | < 0:1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
postgres-decoderbufs-debugsource< 0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c | < 0:0.10.0-2.module+el8.4.0+8873+b821c30a | < 0:0.10.0-2.module+el8.5.0+11354+78b3c9c5 | < 0:1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | < 0:0.10.0-2.module+el8.2.0+9043+1dbb5661 | < 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 | < 0:1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
postgresql< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-contrib< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-contrib-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-debugsource< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-devel< 0:9.2.24-9.el7_9.2
postgresql-docs< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-docs-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-libs< 0:9.2.24-9.el7_9.2
postgresql-plperl< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-plperl-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-plpython< 0:9.2.24-9.el7_9.2
postgresql-plpython3< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-plpython3-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-pltcl< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-pltcl-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-private-devel< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-private-libs< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-private-libs-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-server< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-server-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-server-devel< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-server-devel-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-static< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-test< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-test-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-test-rpm-macros< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1
postgresql-upgrade< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2 | < 0:9.2.24-9.el7_9.2
postgresql-upgrade-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-upgrade-devel< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2
postgresql-upgrade-devel-debuginfo< 0:16.6-1.module+el9.4.0+22559+51e7c730.1 | < 0:13.18-1.el9_4 | < 0:13.18-1.module+el8.6.0+22575+1d1430ad.1 | < 0:12.22-1.module+el8.6.0+22577+1e38f377 | < 0:15.10-1.module+el9.4.0+22547+ce1ca135 | < 0:12.22-1.module+el8.2.0+22565+6ef52370 | < 0:12.22-1.module+el8.8.0+22576+cdf4cc5d | < 0:12.22-1.module+el8.4.0+22583+29030e83 | < 0:13.18-1.module+el8.8.0+22584+ff67aba6.2 | < 0:15.10-1.module+el9.2.0+22561+45645a4b.1 | < 0:13.18-1.el9_0 | < 0:13.18-1.module+el8.4.0+22569+f2b35d9d | < 0:15.10-1.module+el8.8.0+22585+211737dc.1 | < 0:13.18-1.el9_2

Show all 40

Chainguard8 products

postgresql-12< 12.21-r0
postgresql-13< 13.17-r0
postgresql-14< 14.14-r0
postgresql-14-client< 14.24-r2 | All versions (No fix recorded)
postgresql-15< 15.9-r0

Show all 8

Wolfi8 products

postgresql-12< 12.21-r0
postgresql-13< 13.17-r0
postgresql-14< 14.14-r0
postgresql-14-client< 14.24-r2 | All versions (No fix recorded)
postgresql-15< 15.9-r0

Show all 8

Ubuntu6 products

postgresql-10All versions (No fix recorded)
postgresql-12< 12.22-0ubuntu0.20.04.1
postgresql-14< 14.15-0ubuntu0.22.04.1
postgresql-16< 16.6-0ubuntu0.24.04.1
postgresql-9.3All versions (No fix recorded)

Show all 6

Alpine4 products

postgresql14< 14.14-r0
postgresql15< 15.9-r0
postgresql16< 16.5-r0
postgresql17< 17.1-r0

Debian2 products

postgresql-15< 15.9-0+deb12u1
postgresql-17< 17.1-1

Postgresql1 product

postgresql≥ 12.0, < 12.21 | ≥ 13.0, < 13.17 | ≥ 14.0, < 14.14 | ≥ 15.0, < 15.9 | ≥ 16.0, < 16.5 | ≥ 17.0, < 17.1

7 vendors · 69 products

References

44 links

www.postgresql.org/support/security/CVE-2024-10979/ARTICLEREPORTAdvisoryVendor Advisory
github.com/fmora50591/postgresql-env-vuln/blob/main/README.mdEVIDENCEExploitMitigationThird Party Advisory
security.netapp.com/advisory/ntap-20250110-0003/AdvisoryThird Party Advisory
lists.debian.org/debian-lts-announce/2024/11/msg00011.htmlWEB
security.alpinelinux.org/vuln/CVE-2024-10979Advisory
access.redhat.com/errata/RHSA-2024:10593Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2326253REPORT
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10593.jsonAdvisory
access.redhat.com/security/cve/CVE-2024-10979REPORT

Show all 44 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities