Skip to content
OpenAdvisories
High · 7.2 CVE-2023-2454 EUVD-2023-33939GHSA-9fff-w5w3-5x9g

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attack…

Published Jun 9, 2023 · Updated Jun 4, 2025 · Assigned by redhat

Description

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

Affected products

VendorProductAffectedFixed
— postgresql PostgreSQL 15.3, PostgreSQL 14.8, PostgreSQL 13.11, PostgreSQL 12.15, PostgreSQL 11.20 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 12 postgresql-15 15.3-0+deb12u1 —
Debian 11 postgresql-13 13.11-0+deb11u1 DSA-5401-1
Debian 10 postgresql-11 11.20-0+deb10u1 DLA-3422-1
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS postgresql-14 14.8-0ubuntu0.22.04.1 USN-6104-1
Ubuntu 20.04 LTS postgresql-12 12.15-0ubuntu0.20.04.1 USN-6104-1
Ubuntu 18.04 LTS postgresql-10 10.23-0ubuntu0.18.04.2 USN-6104-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS postgresql-9.5 9.5.25-0ubuntu0.16.04.1+esm4 USN-6230-1
Ubuntu Pro 14.04 LTS postgresql-9.3 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 pg_repack 1.4.8-1.module+el9.2.0+17405+aeb9ec60 RHSA-2023:4327
RHEL 9 pgaudit 1.7.0-1.module+el9.2.0+17405+aeb9ec60 RHSA-2023:4327
RHEL 9 postgres-decoderbufs 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 RHSA-2023:4327
RHEL 9 postgresql +13 13.11-1.el9_2 RHSA-2023:4327, RHSA-2023:3714
RHEL 9 postgresql-test-rpm-macros 15.3-1.module+el9.2.0.z+19113+6f5d9d63 RHSA-2023:4327
RHEL 8 pg_repack 1.4.6-3.module+el8.5.0+11354+78b3c9c5 RHSA-2023:5269, RHSA-2023:4535, RHSA-2023:4527
RHEL 8 pgaudit 1.4.0-5.module+el8.5.0+11354+78b3c9c5 RHSA-2023:5269, RHSA-2023:4535, RHSA-2023:4527
RHEL 8 postgres-decoderbufs 0.10.0-2.module+el8.4.0+8873+b821c30a RHSA-2023:5269, RHSA-2023:4535, RHSA-2023:4527
RHEL 8 postgresql +12 10.23-2.module+el8.8.0+19493+5804baf6 RHSA-2023:5269, RHSA-2023:4539, RHSA-2023:4535
RHEL 8 postgresql-private-libs +1 15.3-1.module+el8.8.0+19565+1b0ddae0 RHSA-2023:5269
RHEL 3 rh-postgresql12-postgresql +13 12.15-1.el7 RHSA-2023:4313
RHEL 3 rh-postgresql13-postgresql +14 13.13-1.el7 RHSA-2023:7772
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.0 EUS postgresql +10 13.13-1.el9_0 RHSA-2023:7545
RHEL 8.6 EUS pg_repack 1.4.6-3.module+el8.5.0+11354+78b3c9c5 RHSA-2023:7666, RHSA-2023:7580
RHEL 8.6 EUS pgaudit 1.4.0-5.module+el8.5.0+11354+78b3c9c5 RHSA-2023:7666, RHSA-2023:7580
RHEL 8.6 EUS postgres-decoderbufs 0.10.0-2.module+el8.4.0+8873+b821c30a RHSA-2023:7666, RHSA-2023:7580
RHEL 8.6 EUS postgresql +12 12.17-1.module+el8.6.0+20721+c66fb2f5 RHSA-2023:7666, RHSA-2023:7580
RHEL 8.4 TUS pgaudit 1.4.0-6.module+el8.4.0+11288+c193d6d7 RHSA-2023:7695, RHSA-2023:7694
RHEL 8.4 TUS postgres-decoderbufs 0.10.0-2.module+el8.4.0+8873+b821c30a RHSA-2023:7695, RHSA-2023:7694
RHEL 8.4 TUS postgresql +12 12.17-1.module+el8.4.0+20773+7c41d490 RHSA-2023:7695, RHSA-2023:7694
RHEL 8.4 E4S pgaudit 1.4.0-6.module+el8.4.0+11288+c193d6d7 RHSA-2023:7695, RHSA-2023:7694
RHEL 8.4 E4S postgres-decoderbufs 0.10.0-2.module+el8.4.0+8873+b821c30a RHSA-2023:7695, RHSA-2023:7694
RHEL 8.4 E4S postgresql +12 12.17-1.module+el8.4.0+20773+7c41d490 RHSA-2023:7695, RHSA-2023:7694
RHEL 8.4 AUS pgaudit 1.4.0-6.module+el8.4.0+11288+c193d6d7 RHSA-2023:7695, RHSA-2023:7694
RHEL 8.4 AUS postgres-decoderbufs 0.10.0-2.module+el8.4.0+8873+b821c30a RHSA-2023:7695, RHSA-2023:7694
RHEL 8.4 AUS postgresql +12 12.17-1.module+el8.4.0+20773+7c41d490 RHSA-2023:7695, RHSA-2023:7694
RHEL 8.2 TUS pgaudit 1.4.0-4.module+el8.2.0+9043+1dbb5661 RHSA-2023:7667
RHEL 8.2 TUS postgres-decoderbufs 0.10.0-2.module+el8.2.0+9043+1dbb5661 RHSA-2023:7667
RHEL 8.2 TUS postgresql +12 12.17-1.module+el8.2.0+20720+50ffbc0b RHSA-2023:7667
RHEL 8.2 E4S pgaudit 1.4.0-4.module+el8.2.0+9043+1dbb5661 RHSA-2023:7667
RHEL 8.2 E4S postgres-decoderbufs 0.10.0-2.module+el8.2.0+9043+1dbb5661 RHSA-2023:7667
RHEL 8.2 E4S postgresql +12 12.17-1.module+el8.2.0+20720+50ffbc0b RHSA-2023:7667
RHEL 8.2 AUS pgaudit 1.4.0-4.module+el8.2.0+9043+1dbb5661 RHSA-2023:7667
RHEL 8.2 AUS postgres-decoderbufs 0.10.0-2.module+el8.2.0+9043+1dbb5661 RHSA-2023:7667
RHEL 8.2 AUS postgresql +12 12.17-1.module+el8.2.0+20720+50ffbc0b RHSA-2023:7667

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 pg_repack 1.4.8-1.module_el9.2.0+22+09653793 ALSA-2023:4327
AlmaLinux 9 pgaudit 1.7.0-1.module_el9.2.0+22+09653793 ALSA-2023:4327
AlmaLinux 9 postgres-decoderbufs 1.9.7-1.Final.module_el9.2.0+22+09653793 ALSA-2023:4327
AlmaLinux 9 postgresql +13 13.11-1.el9_2 ALSA-2023:4327, ALSA-2023:3714
AlmaLinux 9 postgresql-test-rpm-macros 15.3-1.module_el9.2.0+32+f3c125b5 ALSA-2023:4327
AlmaLinux 8 pg_repack 1.4.6-3.module_el8.6.0+2758+4f4474df ALSA-2023:5269, ALSA-2023:4535, ALSA-2023:4527
AlmaLinux 8 pgaudit 1.4.0-5.module_el8.6.0+2758+4f4474df ALSA-2023:5269, ALSA-2023:4535, ALSA-2023:4527
AlmaLinux 8 postgres-decoderbufs 0.10.0-2.module_el8.6.0+2758+4f4474df ALSA-2023:5269, ALSA-2023:4535, ALSA-2023:4527
AlmaLinux 8 postgresql +12 10.23-2.module_el8.8.0+3599+77865fc6 ALSA-2023:5269, ALSA-2023:4539, ALSA-2023:4535
AlmaLinux 8 postgresql-private-libs +1 15.3-1.module_el8.8.0+3610+f1fe5820 ALSA-2023:5269

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 pgaudit 1.7.0-1.module+el9.5.0+30637+4391fcca RLSA-2023:4327
Rocky Linux 9 postgres-decoderbufs 1.9.7-1.Final.module+el9.5.0+30637+4391fcca RLSA-2023:4327
Rocky Linux 9 postgresql 13.11-1.el9_2 RLSA-2023:3714
Rocky Linux 8 pg_repack 1.4.6-3.module+el8.5.0+684+c3892ef9 RLSA-2023:5269, RLSA-2023:4535, RLSA-2023:4527
Rocky Linux 8 pgaudit 1.4.0-5.module+el8.5.0+686+20453ecc RLSA-2023:5269, RLSA-2023:4535, RLSA-2023:4527
Rocky Linux 8 postgres-decoderbufs 0.10.0-2.module+el8.5.0+684+c3892ef9 RLSA-2023:5269, RLSA-2023:4535, RLSA-2023:4527
Rocky Linux 8 postgresql 10.23-2.module+el8.8.0+1440+992378a9 RLSA-2023:4539, RLSA-2023:4535, RLSA-2023:4527
ReleasePackageFixed inAdvisory
SLES 15 SP4 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SLES 15 SP4 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SLES 15 SP4 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SLES 15 SP3 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
SLES 15 SP3 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SLES 15 SP3 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SLES 15 SP3 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SLES 15 SP2 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
SLES 15 SP2 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SLES 15 SP2 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SLES 15 SP2 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SLES 15 SP1 postgresql12 12.15-150100.3.41.1 SUSE-SU-2023:2198-1
SLES 12 SP5 postgresql12 12.15-3.39.1 SUSE-SU-2023:2200-1
SLES 12 SP5 postgresql13 13.11-3.33.1 SUSE-SU-2023:2201-1
SLES 12 SP5 postgresql14 14.8-3.23.1 SUSE-SU-2023:2202-1
SLES 12 SP5 postgresql15 15.3-3.9.1 SUSE-SU-2023:2206-1
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 postgresql15 15.3-3.9.1 SUSE-SU-2023:2206-1
SLES 12 SP2 postgresql15 15.3-3.9.1 SUSE-SU-2023:2206-1
SLES for SAP 15 SP3 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
SLES for SAP 15 SP3 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SLES for SAP 15 SP3 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SLES for SAP 15 SP3 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SLES for SAP 15 SP2 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
SLES for SAP 15 SP2 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SLES for SAP 15 SP2 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SLES for SAP 15 SP2 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SLES for SAP 15 SP1 postgresql12 12.15-150100.3.41.1 SUSE-SU-2023:2198-1
SLES for SAP 12 SP5 postgresql12 12.15-3.39.1 SUSE-SU-2023:2200-1
SLES for SAP 12 SP5 postgresql13 13.11-3.33.1 SUSE-SU-2023:2201-1
SLES for SAP 12 SP5 postgresql14 14.8-3.23.1 SUSE-SU-2023:2202-1
SLES for SAP 12 SP5 postgresql15 15.3-3.9.1 SUSE-SU-2023:2206-1
SLES for SAP 12 SP4 postgresql15 15.3-3.9.1 SUSE-SU-2023:2206-1
SLE Real Time 15 SP3 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SLE Real Time 15 SP3 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SLE Real Time 15 SP3 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SLE HPC 15 SP3 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
SLE HPC 15 SP3 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SLE HPC 15 SP3 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SLE HPC 15 SP3 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SLE HPC 15 SP2 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
SLE HPC 15 SP2 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SLE HPC 15 SP2 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SLE HPC 15 SP2 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SLE HPC 15 SP1 postgresql12 12.15-150100.3.41.1 SUSE-SU-2023:2198-1
SUSE OpenStack Cloud Crowbar 9 postgresql15 15.3-3.9.1 SUSE-SU-2023:2206-1
SUSE OpenStack Cloud 9 postgresql15 15.3-3.9.1 SUSE-SU-2023:2206-1
SUSE Manager Server 4.2 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SUSE Manager Server 4.2 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SUSE Manager Server 4.2 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SUSE Manager Proxy 4.2 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SUSE Manager Proxy 4.2 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SUSE Manager Proxy 4.2 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SUSE Enterprise Storage 7.1 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
SUSE Enterprise Storage 7.1 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SUSE Enterprise Storage 7.1 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SUSE Enterprise Storage 7.1 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
SUSE Enterprise Storage 7 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
SUSE Enterprise Storage 7 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
SUSE Enterprise Storage 7 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
SUSE Enterprise Storage 7 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed postgresql11 11.20-1.1 openSUSE-SU-2024:12929-1
openSUSE Tumbleweed postgresql12 12.15-1.1 openSUSE-SU-2024:12930-1
openSUSE Tumbleweed postgresql13 13.11-1.1 openSUSE-SU-2024:12931-1
openSUSE Tumbleweed postgresql14 14.8-1.1 openSUSE-SU-2024:12932-1
openSUSE Tumbleweed postgresql15 15.3-1.1 openSUSE-SU-2024:12933-1
openSUSE Tumbleweed postgresql16 16.4-1.1 openSUSE-SU-2024:14360-1
openSUSE Tumbleweed postgresql17 17.6-2.1 openSUSE-SU-2025:15580-1
openSUSE Leap 15.4 postgresql12 12.15-150200.8.44.1 SUSE-SU-2023:2199-1
openSUSE Leap 15.4 postgresql13 13.11-150200.5.40.1 SUSE-SU-2023:2219-1
openSUSE Leap 15.4 postgresql14 14.8-150200.5.26.1 SUSE-SU-2023:2205-1
openSUSE Leap 15.4 postgresql15 15.3-150200.5.9.1 SUSE-SU-2023:2207-1
ReleasePackageFixed inAdvisory
Alpine v3.22 postgresql15 15.3-r0 —
Alpine v3.21 postgresql15 15.3-r0 —
Alpine v3.20 postgresql14 14.8-r0 —
Alpine v3.20 postgresql15 15.3-r0 —
Alpine v3.19 postgresql13 13.11-r0 —
Alpine v3.19 postgresql14 14.8-r0 —
Alpine v3.19 postgresql15 15.3-r0 —
Alpine v3.18 postgresql12 12.15-r0 —
Alpine v3.18 postgresql13 13.11-r0 —
Alpine v3.18 postgresql14 14.8-r0 —
Alpine v3.18 postgresql15 15.3-r0 —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.17 postgresql12 12.15-r0 —
Alpine v3.17 postgresql13 13.11-r0 —
Alpine v3.17 postgresql14 14.8-r0 —
Alpine v3.17 postgresql15 15.3-r0 —
Alpine v3.16 postgresql12 12.15-r0 —
Alpine v3.16 postgresql13 13.11-r0 —
Alpine v3.16 postgresql14 14.8-r0 —
Alpine v3.15 postgresql12 12.15-r0 —
Alpine v3.15 postgresql13 13.11-r0 —
Alpine v3.15 postgresql14 14.8-r0 —
Alpine v3.14 postgresql 13.11-r0 —
Alpine v3.13 postgresql 13.11-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 postgresql15 +15 15.0-1.amzn2023.0.3 ALAS2023-2023-241
Amazon Linux 2 postgresql +11 9.2.24-8.amzn2.0.2 ALAS2-2024-2462

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 pg_repack 1.4.8-1.module+el9.2.0+21134+ceb95ed9 ELSA-2023-4327
Oracle Linux 9 pgaudit 1.7.0-1.module+el9.2.0+21134+ceb95ed9 ELSA-2023-4327
Oracle Linux 9 postgres-decoderbufs 1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9 ELSA-2023-4327
Oracle Linux 9 postgresql +13 13.11-1.0.1.el9_2 ELSA-2023-4327, ELSA-2023-3714
Oracle Linux 9 postgresql-test-rpm-macros 15.3-1.module+el9.2.0+21134+ceb95ed9 ELSA-2023-4327
Oracle Linux 8 pg_repack 1.4.6-3.module+el8.5.0+20333+86306fc7 ELSA-2023-5269, ELSA-2023-4535, ELSA-2023-4527
Oracle Linux 8 pgaudit 1.4.0-5.module+el8.5.0+20333+86306fc7 ELSA-2023-5269, ELSA-2023-4535, ELSA-2023-4527
Oracle Linux 8 postgres-decoderbufs 0.10.0-2.module+el8.4.0+20016+06fd4df3 ELSA-2023-5269, ELSA-2023-4535, ELSA-2023-4527
Oracle Linux 8 postgresql +12 10.23-2.0.1.module+el8.8.0+21144+bb6efc6c ELSA-2023-5269, ELSA-2023-4539, ELSA-2023-4535
Oracle Linux 8 postgresql-private-libs +1 15.3-1.module+el8.8.0+21162+91b5034b ELSA-2023-5269

Advisories 50

References