cveboard RSS feed

CVE-2023-39417

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Postgresql: extension script @substitutions@ within quoting allow sql injection

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Red Hat Advanced Cluster Security 4.2

Vendor
Red Hat
Product
Red Hat Advanced Cluster Security 4.2
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-central-db-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Advanced Cluster Security 4.2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.2.4-6unaffectedrpm*UnavailableNone listed

Red Hat Advanced Cluster Security 4.2

Vendor
Red Hat
Product
Red Hat Advanced Cluster Security 4.2
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-main-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Advanced Cluster Security 4.2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.2.4-6unaffectedrpm*UnavailableNone listed

Red Hat Advanced Cluster Security 4.2

Vendor
Red Hat
Product
Red Hat Advanced Cluster Security 4.2
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-operator-bundle
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Advanced Cluster Security 4.2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.2.4-7unaffectedrpm*UnavailableNone listed

Red Hat Advanced Cluster Security 4.2

Vendor
Red Hat
Product
Red Hat Advanced Cluster Security 4.2
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-scanner-db-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Advanced Cluster Security 4.2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.2.4-6unaffectedrpm*UnavailableNone listed

Red Hat Advanced Cluster Security 4.2

Vendor
Red Hat
Product
Red Hat Advanced Cluster Security 4.2
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-scanner-db-slim-rhel8
Package collection
https://catalog.redhat.com/software/containers/
Red Hat Advanced Cluster Security 4.2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.2.4-7unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8
Platforms
Unknown
Default status
affected
Package
postgresql:13
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8090020231114113712.a75119d5unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8090020231128173330.a75119d5unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8
Platforms
Unknown
Default status
affected
Package
postgresql:15
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8090020231114113548.a75119d5unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.2 Advanced Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.2 Advanced Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Advanced Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8020020231128165246.4cda2c84unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.2 Telecommunications Update Service
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Telecommunications Update Service · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8020020231128165246.4cda2c84unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8020020231128165246.4cda2c84unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8040020231127153301.522a0ee4unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:13
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8040020231127154806.522a0ee4unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Telecommunications Update Service · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8040020231127153301.522a0ee4unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
Platforms
Unknown
Default status
affected
Package
postgresql:13
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Telecommunications Update Service · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8040020231127154806.522a0ee4unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8040020231127153301.522a0ee4unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
Platforms
Unknown
Default status
affected
Package
postgresql:13
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8040020231127154806.522a0ee4unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.6 Extended Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.6 Extended Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:13
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Extended Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8060020231114115246.ad008a3aunaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.6 Extended Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.6 Extended Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Extended Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8060020231128165328.ad008a3aunaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.8 Extended Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.8 Extended Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:13
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Extended Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8080020231114105206.63b34585unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.8 Extended Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.8 Extended Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:12
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Extended Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8080020231128165335.63b34585unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 8.8 Extended Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8.8 Extended Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:15
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Extended Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8080020231113134015.63b34585unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 9

Vendor
Red Hat
Product
Red Hat Enterprise Linux 9
Platforms
Unknown
Default status
affected
Package
postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0:13.13-1.el9_3unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 9

Vendor
Red Hat
Product
Red Hat Enterprise Linux 9
Platforms
Unknown
Default status
affected
Package
postgresql:15
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
9030020231120082734.rhel9unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 9.0 Extended Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 9.0 Extended Update Support
Platforms
Unknown
Default status
affected
Package
postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.0 Extended Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0:13.13-1.el9_0unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 9.2 Extended Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 9.2 Extended Update Support
Platforms
Unknown
Default status
affected
Package
postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Extended Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0:13.13-1.el9_2unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 9.2 Extended Update Support

Vendor
Red Hat
Product
Red Hat Enterprise Linux 9.2 Extended Update Support
Platforms
Unknown
Default status
affected
Package
postgresql:15
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Extended Update Support · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
9020020231115020618.rhel9unaffectedrpm*UnavailableNone listed

Red Hat Software Collections for Red Hat Enterprise Linux 7

Vendor
Red Hat
Product
Red Hat Software Collections for Red Hat Enterprise Linux 7
Platforms
Unknown
Default status
affected
Package
rh-postgresql12-postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Software Collections for Red Hat Enterprise Linux 7 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0:12.17-1.el7unaffectedrpm*UnavailableNone listed

Red Hat Software Collections for Red Hat Enterprise Linux 7

Vendor
Red Hat
Product
Red Hat Software Collections for Red Hat Enterprise Linux 7
Platforms
Unknown
Default status
affected
Package
rh-postgresql13-postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Software Collections for Red Hat Enterprise Linux 7 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0:13.13-1.el7unaffectedrpm*UnavailableNone listed

RHACS-3.74-RHEL-8

Vendor
Red Hat
Product
RHACS-3.74-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-central-db-rhel8
Package collection
https://catalog.redhat.com/software/containers/
RHACS-3.74-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.74.8-9unaffectedrpm*UnavailableNone listed

RHACS-3.74-RHEL-8

Vendor
Red Hat
Product
RHACS-3.74-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-main-rhel8
Package collection
https://catalog.redhat.com/software/containers/
RHACS-3.74-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.74.8-9unaffectedrpm*UnavailableNone listed

RHACS-3.74-RHEL-8

Vendor
Red Hat
Product
RHACS-3.74-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-operator-bundle
Package collection
https://catalog.redhat.com/software/containers/
RHACS-3.74-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.74.8-7unaffectedrpm*UnavailableNone listed

RHACS-3.74-RHEL-8

Vendor
Red Hat
Product
RHACS-3.74-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-scanner-db-rhel8
Package collection
https://catalog.redhat.com/software/containers/
RHACS-3.74-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.74.8-9unaffectedrpm*UnavailableNone listed

RHACS-3.74-RHEL-8

Vendor
Red Hat
Product
RHACS-3.74-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-scanner-db-slim-rhel8
Package collection
https://catalog.redhat.com/software/containers/
RHACS-3.74-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.74.8-9unaffectedrpm*UnavailableNone listed

RHACS-4.1-RHEL-8

Vendor
Red Hat
Product
RHACS-4.1-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-central-db-rhel8
Package collection
https://catalog.redhat.com/software/containers/
RHACS-4.1-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.1.6-6unaffectedrpm*UnavailableNone listed

RHACS-4.1-RHEL-8

Vendor
Red Hat
Product
RHACS-4.1-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-main-rhel8
Package collection
https://catalog.redhat.com/software/containers/
RHACS-4.1-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.1.6-6unaffectedrpm*UnavailableNone listed

RHACS-4.1-RHEL-8

Vendor
Red Hat
Product
RHACS-4.1-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-operator-bundle
Package collection
https://catalog.redhat.com/software/containers/
RHACS-4.1-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.1.6-6unaffectedrpm*UnavailableNone listed

RHACS-4.1-RHEL-8

Vendor
Red Hat
Product
RHACS-4.1-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-scanner-db-rhel8
Package collection
https://catalog.redhat.com/software/containers/
RHACS-4.1-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.1.6-6unaffectedrpm*UnavailableNone listed

RHACS-4.1-RHEL-8

Vendor
Red Hat
Product
RHACS-4.1-RHEL-8
Platforms
Unknown
Default status
affected
Package
advanced-cluster-security/rhacs-scanner-db-slim-rhel8
Package collection
https://catalog.redhat.com/software/containers/
RHACS-4.1-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.1.6-6unaffectedrpm*UnavailableNone listed

Red Hat Enterprise Linux 6

Vendor
Red Hat
Product
Red Hat Enterprise Linux 6
Platforms
Unknown
Default status
unknown
Package
postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux 7

Vendor
Red Hat
Product
Red Hat Enterprise Linux 7
Platforms
Unknown
Default status
unknown
Package
postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux 8

Vendor
Red Hat
Product
Red Hat Enterprise Linux 8
Platforms
Unknown
Default status
unaffected
Package
postgresql:10/postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Software Collections

Vendor
Red Hat
Product
Red Hat Software Collections
Platforms
Unknown
Default status
affected
Package
rh-postgresql10-postgresql
Package collection
https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.