PostgreSQL up to 16.0 Array Modification integer overflow

Summaryinfo

A vulnerability was found in PostgreSQL up to 16.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Array Modification Handler. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2023-5869. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in PostgreSQL up to 16.0 (Database Software) and classified as very critical. This vulnerability affects an unknown code of the component Array Modification Handler. The manipulation with an unknown input leads to a integer overflow vulnerability. The CWE definition for the vulnerability is CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

The weakness was presented 11/10/2023. The advisory is shared for download at bugzilla.redhat.com. This vulnerability was named CVE-2023-5869 since 10/31/2023. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 10/25/2025).

The vulnerability scanner Nessus provides a plugin with the ID 213339 (Oracle Linux 7 : postgresql (ELSA-2024-10882)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 11.22, 12.17, 13.13, 14.10, 15.5 or 16.1 eliminates this vulnerability. The upgrade is hosted for download at postgresql.org.

The vulnerability is also documented in the databases at Tenable (213339) and EUVD (EUVD-2023-58143). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Database Software

Name

• PostgreSQL

Version

• 11.0
• 11.1
• 11.2
• 11.3
• 11.4
• 11.5
• 11.6
• 11.7
• 11.8
• 11.9
• 11.10
• 11.11
• 11.12
• 11.13
• 11.14
• 11.15
• 11.16
• 11.17
• 11.18
• 11.19
• 11.20
• 11.21
• 12.0
• 12.1
• 12.2
• 12.3
• 12.4
• 12.5
• 12.6
• 12.7
• 12.8
• 12.9
• 12.10
• 12.11
• 12.12
• 12.13
• 12.14
• 12.15
• 12.16
• 13.0
• 13.1
• 13.2
• 13.3
• 13.4
• 13.5
• 13.6
• 13.7
• 13.8
• 13.9
• 13.10
• 13.11
• 13.12
• 14.0
• 14.1
• 14.2
• 14.3
• 14.4
• 14.5
• 14.6
• 14.7
• 14.8
• 14.9
• 15.0
• 15.1
• 15.2
• 15.3
• 15.4
• 16.0

License

• open-source

Website

• Product: https://www.postgresql.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion