onyx --cves cve-2023-5868
CVE-2023-5868
- score
- <0.1
- cvss
- 4.3
- epss
- 2.8%
- published
- 2023-12-10
- kev added
- —
- first seen
PostgreSQL contains a memory disclosure caused by handling 'unknown'-type arguments in aggregate functions, letting remote users access sensitive information, exploit requires crafting specific aggregate function calls with 'unknown'-type arguments.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
CWE-686
NVD-CWE-noinfo
References 27
- https://access.redhat.com/errata/RHSA-2023:7784
- https://access.redhat.com/errata/RHSA-2023:7883
- https://access.redhat.com/errata/RHSA-2024:0304
- https://lists.debian.org/debian-lts-announce/2023/11/msg00007.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2247168
- https://access.redhat.com/errata/RHSA-2023:7616
- https://access.redhat.com/errata/RHSA-2023:7666
- https://access.redhat.com/errata/RHSA-2023:7667
- https://access.redhat.com/errata/RHSA-2023:7770
- https://access.redhat.com/security/cve/CVE-2023-5868
- https://access.redhat.com/errata/RHSA-2023:7884
- https://security.netapp.com/advisory/ntap-20240119-0003/
- https://www.postgresql.org/support/security/CVE-2023-5868/
- https://access.redhat.com/errata/RHSA-2023:7545
- https://access.redhat.com/errata/RHSA-2023:7694
- https://access.redhat.com/errata/RHSA-2023:7785
- https://access.redhat.com/errata/RHSA-2024:0332
- https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
- https://access.redhat.com/errata/RHSA-2023:7656
- https://access.redhat.com/errata/RHSA-2023:7695
- https://access.redhat.com/errata/RHSA-2023:7714
- https://access.redhat.com/errata/RHSA-2023:7772
- https://access.redhat.com/errata/RHSA-2023:7885
- https://access.redhat.com/errata/RHSA-2024:0337
- https://access.redhat.com/errata/RHSA-2023:7579