← volver
CVE-2023-5869

Postgresql: buffer overrun from integer overflow in array modification

CVSS 8.8 HIGHEPSS 4.3%CWE-190
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.8EPSS 4.3%KEV nãoPoC Nuclei Metasploit Patch referenciado
Ciclo de vida
10 dic 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →