CVE-2023-5868

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 4.3EPSS 3%

Published 2023-12-10Updated 2025-04-27

Vulnerability details

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CNAredhat

EPSS score history

Sources

1 links

PoC links are not available for guest users. Login to view them.

CVE Organization

Profile

CVSS

4.3

EPSS

Published

2023-12-10

Updated

2025-04-27

CNA

redhat

Vendors

Red Hat

19 products

CPEs

cpe:/a:redhat:advanced_cluster_security:4.2::el8

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/a:redhat:rhel_tus:8.2::appstream

cpe:/a:redhat:rhel_aus:8.2::appstream

cpe:/a:redhat:rhel_e4s:8.2::appstream

cpe:/a:redhat:rhel_aus:8.4::appstream

cpe:/a:redhat:rhel_e4s:8.4::appstream

cpe:/a:redhat:rhel_tus:8.4::appstream

cpe:/a:redhat:rhel_eus:8.6::appstream

cpe:/a:redhat:rhel_eus:8.8::appstream

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/a:redhat:enterprise_linux:9::crb

cpe:/a:redhat:rhel_eus:9.0::appstream

cpe:/a:redhat:rhel_eus:9.0::crb

cpe:/a:redhat:rhel_eus:9.2::crb

cpe:/a:redhat:rhel_eus:9.2::appstream

cpe:/a:redhat:rhel_software_collections:3::el7

cpe:/a:redhat:advanced_cluster_security:3.74::el8

cpe:/a:redhat:advanced_cluster_security:4.1::el8

cpe:/o:redhat:enterprise_linux:6

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:rhel_software_collections:3

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated