Skip to content
Fencer Vulns
medium 4.3

CVE-2023-5868 json

Postgresql: memory disclosure in aggregate function calls

published 2023-12-10 2 y ago modified 2026-11-05 3 d ago also BIT-postgresql-2023-5868 , EUVD-2023-58142 , JLSEC-2026-43

cvss
4.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
2.8%
EPSS 2.8% chance of exploitation in 30 days, percentile 86%
public exploits
0
none known

Summary

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.

Patch / fix

  • bitnami postgresql 11.22.0, 12.17.0, 13.13.0, 14.10.0, 15.5.0, 16.0.1
  • julia LibPQ_jll 16.8.0+0
  • Red Hat Red Hat Advanced Cluster Security 4.2 4.2.4-6, 4.2.4-7
  • Red Hat Red Hat Enterprise Linux 8 8090020231114113548.a75119d5, 8090020231114113712.a75119d5, 8090020231128173330.a75119d5
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020231128165246.4cda2c84
  • Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service 8020020231128165246.4cda2c84
  • Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions 8020020231128165246.4cda2c84
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020231127153301.522a0ee4, 8040020231127154806.522a0ee4
  • Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service 8040020231127153301.522a0ee4, 8040020231127154806.522a0ee4
  • Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 8040020231127153301.522a0ee4, 8040020231127154806.522a0ee4
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support 8060020231114115246.ad008a3a, 8060020231128165328.ad008a3a
  • Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support 8080020231113134015.63b34585, 8080020231114105206.63b34585, 8080020231128165335.63b34585
  • Red Hat Red Hat Enterprise Linux 9 0:13.13-1.el9_3, 9030020231120082734.rhel9
  • Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support 0:13.13-1.el9_0
  • Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support 0:13.13-1.el9_2, 9020020231115020618.rhel9
  • Red Hat Red Hat Software Collections for Red Hat Enterprise Linux 7 0:12.17-1.el7, 0:13.13-1.el7
  • Red Hat RHACS-3.74-RHEL-8 3.74.8-7, 3.74.8-9
  • Red Hat RHACS-4.1-RHEL-8 4.1.6-6
  • postgresql-15 Debian 12 15.5-0+deb12u1

debian advisories DEBIAN-CVE-2023-5868

  • postgresql-12 Ubuntu 20.04 LTS 12.17-0ubuntu0.20.04.1
  • postgresql-14 Ubuntu 22.04 LTS 14.10-0ubuntu0.22.04.1
  • postgresql-10 Ubuntu Pro 18.04 LTS 10.23-0ubuntu0.18.04.2+esm1

ubuntu advisories UBUNTU-CVE-2023-5868

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • rh-postgresql13-postgresql RHEL 3 SOFTWARE_COLLECTIONS 13.13-1.el7
  • rh-postgresql13-postgresql-libs RHEL 3 SOFTWARE_COLLECTIONS 13.13-1.el7
  • rh-postgresql13-postgresql-test RHEL 3 SOFTWARE_COLLECTIONS 13.13-1.el7
  • rh-postgresql13-postgresql-pltcl RHEL 3 SOFTWARE_COLLECTIONS 13.13-1.el7
  • rh-postgresql13-postgresql-plperl RHEL 3 SOFTWARE_COLLECTIONS 13.13-1.el7
  • rh-postgresql13-postgresql-server RHEL 3 SOFTWARE_COLLECTIONS 13.13-1.el7
  • rh-postgresql13-postgresql-contrib RHEL 3 SOFTWARE_COLLECTIONS 13.13-1.el7
  • rh-postgresql13-postgresql-plpython RHEL 3 SOFTWARE_COLLECTIONS 13.13-1.el7

red hat advisories RHSA-2023:7694RHSA-2023:7667RHSA-2023:7666RHSA-2023:7580RHSA-2023:7695RHSA-2023:7545

  • postgresql16 SLE Module for Server Applications 15 SP5, SLE Module for Server Applications 15 SP4, SLE Module for Package Hub 15 SP5 +13 more 16.1-150200.5.7.1
  • postgresql SLE Module for Server Applications 15 SP4, SLE Module for Package Hub 15 SP4, SLE Module for Legacy 15 SP4 +2 more 16-150400.4.9.2
  • postgresql SLE Module for Server Applications 15 SP5, SLE Module for Package Hub 15 SP5, SLE Module for Legacy 15 SP5 +2 more 16-150500.10.3.2
  • postgresql SLE High Performance Computing 15 SP3-ESPOS, Enterprise Storage 7.1, SLES for SAP 15 SP3 +2 more 16-150300.10.18.3
  • postgresql15 SLE Module for Server Applications 15 SP5, SLE Module for Server Applications 15 SP4, SLE Module for Package Hub 15 SP4 +9 more 15.5-150200.5.19.1
  • postgresql16-mini openSUSE Leap 15.5, openSUSE Leap 15.4 16.1-150200.5.7.1
  • postgresql14 SLES for SAP 15 SP3, SLES for SAP 15 SP2, SLES 15 SP3-LTSS +12 more 14.10-150200.5.36.1
  • postgresql13 SLES for SAP 15 SP3, SLES for SAP 15 SP2, SLES 15 SP3-LTSS +8 more 13.13-150200.5.50.1

suse advisories SUSE-SU-2024:0106-1SUSE-SU-2023:4495-1SUSE-SU-2023:4479-1SUSE-SU-2023:4455-1SUSE-SU-2023:4454-1SUSE-SU-2023:4434-1

  • postgresql17 openSUSE Tumbleweed 17.6-2.1
  • postgresql11 openSUSE Tumbleweed 11.22-1.1
  • postgresql13 openSUSE Tumbleweed 13.13-1.1
  • postgresql14 openSUSE Tumbleweed 14.10-1.1
  • postgresql15 openSUSE Tumbleweed 15.5-1.1
  • postgresql16 openSUSE Tumbleweed 16.1-1.1
  • postgresql12 openSUSE Tumbleweed 12.18-1.1

opensuse advisories openSUSE-SU-2025:15580-1openSUSE-SU-2024:13408-1openSUSE-SU-2024:13409-1openSUSE-SU-2024:13410-1openSUSE-SU-2024:13413-1openSUSE-SU-2024:13414-1

  • pgaudit AlmaLinux 8 1.7.0-1.module_el8.8.0+3487+43ec1b9f
  • pg_repack AlmaLinux 8 1.4.8-1.module_el8.8.0+3487+43ec1b9f
  • postgresql AlmaLinux 8 15.5-1.module_el8.9.0+3706+885c732e
  • postgresql-test AlmaLinux 8 15.5-1.module_el8.9.0+3706+885c732e
  • postgresql-pltcl AlmaLinux 8 15.5-1.module_el8.9.0+3706+885c732e
  • postgresql-plperl AlmaLinux 8 15.5-1.module_el8.9.0+3706+885c732e
  • postgresql-server AlmaLinux 8 15.5-1.module_el8.9.0+3706+885c732e
  • postgresql-contrib AlmaLinux 8 15.5-1.module_el8.9.0+3706+885c732e

almalinux advisories ALSA-2023:7884ALSA-2023:7784ALSA-2023:7785ALSA-2023:7714ALSA-2023:7581

  • pgaudit Rocky Linux 8 1.7.0-1.module+el8.10.0+40056+df351139
  • pgaudit Rocky Linux 8 1.7.0-1.module+el8.9.0+1525+fc91df60
  • pg_repack Rocky Linux 8 1.4.8-1.module+el8.9.0+1525+fc91df60
  • pg_repack Rocky Linux 8 1.4.8-1.module+el8.10.0+40056+df351139
  • pg_repack Rocky Linux 8 1.4.8-1.module+el8.10.0+1858+fcc46a79
  • pg_repack Rocky Linux 8 1.4.8-1.module+el8.10.0+1622+bd25b19c
  • postgres-decoderbufs Rocky Linux 8 1.9.7-1.Final.module+el8.10.0+40056+df351139
  • postgres-decoderbufs Rocky Linux 8 1.9.7-1.Final.module+el8.9.0+1525+fc91df60

rocky linux advisories RLSA-2023:7884RLSA-2023:7785RLSA-2023:7714RLSA-2023:7581

  • postgresql12 Alpine 3.18, Alpine 3.17, Alpine 3.16 +1 more 12.17-r0
  • postgresql14 Alpine 3.20, Alpine 3.19, Alpine 3.18 +3 more 14.10-r0
  • postgresql15 Alpine 3.22, Alpine 3.21, Alpine 3.20 +3 more 15.5-r0
  • postgresql16 Alpine 3.24, Alpine 3.23, Alpine 3.22 +3 more 16.1-r0

alpine advisories ALPINE-CVE-2023-5868

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • postgresql CBL-Mariner 2.0 14.10-1

azure linux advisories AZL-32106

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-5868 updated cvss 4.3

postgresql: Memory disclosure in aggregate function calls

  • Red Hat Enterprise Linux 6 postgresql, postgresql-libs, postgresql-test, postgresql-pltcl, postgresql-plperl, postgresql-server, +2 more
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 7 postgresql, postgresql-libs, postgresql-test, postgresql-pltcl, postgresql-plperl, postgresql-server, +3 more Red Hat Enterprise Linux 8 pgaudit, pg_repack, postgresql, postgresql-test, postgresql-pltcl, postgresql-plperl, +7 more Red Hat Software Collections rh-postgresql10-postgresql, rh-postgresql10-postgresql-libs, rh-postgresql10-postgresql-test, rh-postgresql10-postgresql-pltcl, rh-postgresql10-postgresql-plperl, rh-postgresql10-postgresql-server, +5 more
    affected: workaround, no fix planned “Will not fix”
  • Red Hat CodeReady Linux Builder (v. 9) postgresql-test 13.13-1.el9_3
    fixed: vendor fix RHSA-2023:7784
  • Red Hat CodeReady Linux Builder EUS (v.9.0) postgresql-test 13.13-1.el9_0
    fixed: vendor fix RHSA-2023:7545
  • Red Hat CodeReady Linux Builder EUS (v.9.2) postgresql-test 13.13-1.el9_2
    fixed: vendor fix RHSA-2023:7616
  • Red Hat Enterprise Linux AppStream (v. 8) pgaudit 1.4.0-5.module+el8.9.0+19330+c97ddbdf, pgaudit 1.5.0-1.module+el8.9.0+20664+9c30cf7f, pgaudit 1.7.0-1.module+el8.9.0+19797+c4ce5969, pg_repack 1.4.6-3.module+el8.9.0+19330+c97ddbdf, pg_repack 1.4.6-3.module+el8.9.0+20664+9c30cf7f, pg_repack 1.4.8-1.module+el8.9.0+19797+c4ce5969, +31 more
    fixed: vendor fix RHSA-2023:7714
  • Red Hat Enterprise Linux AppStream (v. 9) postgresql 13.13-1.el9_3, postgresql-pltcl 13.13-1.el9_3, postgresql-plperl 13.13-1.el9_3, postgresql-server 13.13-1.el9_3, postgresql-contrib 13.13-1.el9_3, postgresql-upgrade 13.13-1.el9_3, +15 more
    fixed: vendor fix RHSA-2023:7785
  • Red Hat Enterprise Linux AppStream AUS (v. 8.2) pgaudit 1.4.0-4.module+el8.2.0+9043+1dbb5661, postgresql 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-test 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-pltcl 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-plperl 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-server 12.17-1.module+el8.2.0+20720+50ffbc0b, +5 more
    fixed: vendor fix RHSA-2023:7667
show 14 more
  • Red Hat Enterprise Linux AppStream AUS (v.8.4) pgaudit 1.5.0-1.module+el8.4.0+8873+b821c30a, pgaudit 1.4.0-6.module+el8.4.0+11288+c193d6d7, postgresql 12.17-1.module+el8.4.0+20773+7c41d490, postgresql 13.13-1.module+el8.4.0+20774+68ad636d, postgresql-test 12.17-1.module+el8.4.0+20773+7c41d490, postgresql-test 13.13-1.module+el8.4.0+20774+68ad636d, +16 more
    fixed: vendor fix RHSA-2023:7694
  • Red Hat Enterprise Linux AppStream E4S (v. 8.2) pgaudit 1.4.0-4.module+el8.2.0+9043+1dbb5661, postgresql 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-test 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-pltcl 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-plperl 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-server 12.17-1.module+el8.2.0+20720+50ffbc0b, +5 more
    fixed: vendor fix RHSA-2023:7667
  • Red Hat Enterprise Linux AppStream E4S (v.8.4) pgaudit 1.5.0-1.module+el8.4.0+8873+b821c30a, pgaudit 1.4.0-6.module+el8.4.0+11288+c193d6d7, postgresql 12.17-1.module+el8.4.0+20773+7c41d490, postgresql 13.13-1.module+el8.4.0+20774+68ad636d, postgresql-test 12.17-1.module+el8.4.0+20773+7c41d490, postgresql-test 13.13-1.module+el8.4.0+20774+68ad636d, +16 more
    fixed: vendor fix RHSA-2023:7694
  • Red Hat Enterprise Linux AppStream EUS (v.8.6) pgaudit 1.5.0-1.module+el8.4.0+8873+b821c30a, pgaudit 1.4.0-5.module+el8.5.0+11354+78b3c9c5, pg_repack 1.4.6-3.module+el8.5.0+11354+78b3c9c5, pg_repack 1.4.6-3.module+el8.5.0+11357+bcc62552, postgresql 12.17-1.module+el8.6.0+20721+c66fb2f5, postgresql 13.13-1.module+el8.6.0+20665+ba8c5a93, +18 more
    fixed: vendor fix RHSA-2023:7666
  • Red Hat Enterprise Linux AppStream EUS (v.8.8) pgaudit 1.5.0-1.module+el8.4.0+8873+b821c30a, pgaudit 1.4.0-5.module+el8.5.0+11354+78b3c9c5, pgaudit 1.7.0-1.module+el8.8.0+17071+aaaceaa4, pg_repack 1.4.6-3.module+el8.5.0+11354+78b3c9c5, pg_repack 1.4.6-3.module+el8.5.0+11357+bcc62552, pg_repack 1.4.8-1.module+el8.8.0+17071+aaaceaa4, +31 more
    fixed: vendor fix RHSA-2023:7656
  • Red Hat Enterprise Linux AppStream EUS (v.9.0) postgresql 13.13-1.el9_0, postgresql-pltcl 13.13-1.el9_0, postgresql-plperl 13.13-1.el9_0, postgresql-server 13.13-1.el9_0, postgresql-contrib 13.13-1.el9_0, postgresql-upgrade 13.13-1.el9_0, +2 more
    fixed: vendor fix RHSA-2023:7545
  • Red Hat Enterprise Linux AppStream EUS (v.9.2) postgresql 13.13-1.el9_2, postgresql-pltcl 13.13-1.el9_2, postgresql-plperl 13.13-1.el9_2, postgresql-server 13.13-1.el9_2, postgresql-contrib 13.13-1.el9_2, postgresql-upgrade 13.13-1.el9_2, +15 more
    fixed: vendor fix RHSA-2023:7885
  • Red Hat Enterprise Linux AppStream TUS (v. 8.2) pgaudit 1.4.0-4.module+el8.2.0+9043+1dbb5661, postgresql 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-test 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-pltcl 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-plperl 12.17-1.module+el8.2.0+20720+50ffbc0b, postgresql-server 12.17-1.module+el8.2.0+20720+50ffbc0b, +5 more
    fixed: vendor fix RHSA-2023:7667
  • Red Hat Enterprise Linux AppStream TUS (v.8.4) pgaudit 1.5.0-1.module+el8.4.0+8873+b821c30a, pgaudit 1.4.0-6.module+el8.4.0+11288+c193d6d7, postgresql 12.17-1.module+el8.4.0+20773+7c41d490, postgresql 13.13-1.module+el8.4.0+20774+68ad636d, postgresql-test 12.17-1.module+el8.4.0+20773+7c41d490, postgresql-test 13.13-1.module+el8.4.0+20774+68ad636d, +16 more
    fixed: vendor fix RHSA-2023:7694
  • Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql12-postgresql 12.17-1.el7, rh-postgresql13-postgresql 13.13-1.el7, rh-postgresql12-postgresql-libs 12.17-1.el7, rh-postgresql12-postgresql-test 12.17-1.el7, rh-postgresql13-postgresql-libs 13.13-1.el7, rh-postgresql13-postgresql-test 13.13-1.el7, +17 more Red Hat Software Collections for RHEL(v. 7) rh-postgresql12-postgresql 12.17-1.el7, rh-postgresql13-postgresql 13.13-1.el7, rh-postgresql12-postgresql-libs 12.17-1.el7, rh-postgresql12-postgresql-test 12.17-1.el7, rh-postgresql13-postgresql-libs 13.13-1.el7, rh-postgresql13-postgresql-test 13.13-1.el7, +17 more
    fixed: vendor fix RHSA-2023:7770
  • Red Hat RHACS 3.74 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8 3.74.8-9, advanced-cluster-security/rhacs-operator-bundle 3.74.8-7, advanced-cluster-security/rhacs-central-db-rhel8 3.74.8-9, advanced-cluster-security/rhacs-scanner-db-rhel8 3.74.8-9, advanced-cluster-security/rhacs-scanner-db-slim-rhel8 3.74.8-9
    fixed: vendor fix RHSA-2024:0304
  • Red Hat RHACS 4.1 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8 4.1.6-6, advanced-cluster-security/rhacs-operator-bundle 4.1.6-6, advanced-cluster-security/rhacs-central-db-rhel8 4.1.6-6, advanced-cluster-security/rhacs-scanner-db-rhel8 4.1.6-6, advanced-cluster-security/rhacs-scanner-db-slim-rhel8 4.1.6-6
    fixed: vendor fix RHSA-2024:0332
  • Red Hat RHACS 4.2 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8 4.2.4-6, advanced-cluster-security/rhacs-operator-bundle 4.2.4-7, advanced-cluster-security/rhacs-central-db-rhel8 4.2.4-6, advanced-cluster-security/rhacs-scanner-db-rhel8 4.2.4-6, advanced-cluster-security/rhacs-scanner-db-slim-rhel8 4.2.4-7
    fixed: vendor fix RHSA-2024:0337
  • Red Hat Enterprise Linux 8 pgaudit, pg_repack, postgresql, postgresql-test, postgresql-pltcl, postgresql-plperl, +7 more Red Hat Enterprise Linux 9 postgresql, postgresql-test, postgresql-pltcl, postgresql-plperl, postgresql-server, postgresql-contrib, +4 more Red Hat RHACS 3.74 for RHEL 8 advanced-cluster-security/rhacs-roxctl-rhel8 3.74.8-9, advanced-cluster-security/rhacs-scanner-rhel8 3.74.8-9, advanced-cluster-security/rhacs-rhel8-operator 3.74.8-9, advanced-cluster-security/rhacs-collector-rhel8 3.74.8-9, advanced-cluster-security/rhacs-scanner-slim-rhel8 3.74.8-9, advanced-cluster-security/rhacs-collector-slim-rhel8 3.74.8-8 Red Hat RHACS 4.1 for RHEL 8 advanced-cluster-security/rhacs-roxctl-rhel8 4.1.6-6, advanced-cluster-security/rhacs-scanner-rhel8 4.1.6-6, advanced-cluster-security/rhacs-rhel8-operator 4.1.6-6, advanced-cluster-security/rhacs-collector-rhel8 4.1.6-3, advanced-cluster-security/rhacs-scanner-slim-rhel8 4.1.6-6, advanced-cluster-security/rhacs-collector-slim-rhel8 4.1.6-6 Red Hat RHACS 4.2 for RHEL 8 advanced-cluster-security/rhacs-roxctl-rhel8 4.2.4-6, advanced-cluster-security/rhacs-scanner-rhel8 4.2.4-6, advanced-cluster-security/rhacs-rhel8-operator 4.2.4-6, advanced-cluster-security/rhacs-collector-rhel8 4.2.4-7, advanced-cluster-security/rhacs-scanner-slim-rhel8 4.2.4-7, advanced-cluster-security/rhacs-collector-slim-rhel8 4.2.4-7
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
14 mo ago

Exploit prediction

2.77% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
OSV 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected packages

ecosystem package affected fixed in
bitnami postgresql
>=11.0.0, <11.22.0
>=12.0.0, <12.17.0
>=13.0.0, <13.13.0
>=14.0.0, <14.10.0
>=15.0.0, <15.5.0
>=16.0.0, <16.0.1
11.22.0
12.17.0
13.13.0
14.10.0
15.5.0
16.0.1
julia LibPQ_jll
<16.8.0+0
16.8.0+0

Affected products

  • Red Hat Red Hat Advanced Cluster Security 4.2
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support
  • Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service
  • Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  • Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  • Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support
  • Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support
  • Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
  • Red Hat Red Hat Software Collections for Red Hat Enterprise Linux 7
  • Red Hat RHACS-3.74-RHEL-8
  • Red Hat RHACS-4.1-RHEL-8
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Software Collections

Classification

Weakness
  • CWE-686 Function Call With Incorrect Argument Type
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.