Vulnerability · Published Nov 14, 2024 · Assigned by PostgreSQL
CVE-2024-10979PostgreSQL PL/Perl environment variable changes execute arbitrary code
High 8.8
In plain English
A high-severity security flaw in PostgreSQL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.4% (higher than 91% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)4.4%top 8.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.9.0+3704+f1f917ce | ALSA-2024:10785 |
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.6.0+2760+1746ec94 | ALSA-2024:10832 |
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.6.0+2760+1746ec94 | ALSA-2024:10785 |
| AlmaLinux:8 | pg_repack | 1.4.8-1.module_el8.10.0+3798+606ebb9f | ALSA-2024:10830 |
| AlmaLinux:8 | pg_repack | 1.5.1-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | pg_repack | 1.4.8-1.module_el8.9.0+3706+885c732e | ALSA-2024:10830 |
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.9.0+3704+f1f917ce | ALSA-2024:10832 |
| AlmaLinux:9 | pg_repack | 1.5.1-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | pg_repack | 1.5.1-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | pg_repack | 1.4.8-2.module_el9.5.0+120+4533eb20 | ALSA-2024:10787 |
| AlmaLinux:8 | pgaudit | 1.4.0-7.module_el8.10.0+3889+48cb11fb.alma.1 | ALSA-2024:10785 |
| AlmaLinux:8 | pgaudit | 1.5.0-1.module_el8.6.0+2760+1746ec94 | ALSA-2024:10832 |
| AlmaLinux:8 | pgaudit | 1.5.0-1.module_el8.6.0+3095+ee60d910 | ALSA-2024:10832 |
| AlmaLinux:8 | pgaudit | 16.0-1.module_el8.10.0+3798+606ebb9f | ALSA-2024:10831 |
| AlmaLinux:8 | pgaudit | 1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1 | ALSA-2024:10785 |
| AlmaLinux:8 | pgaudit | 1.7.0-1.module_el8.9.0+3706+885c732e | ALSA-2024:10830 |
| AlmaLinux:9 | pgaudit | 16.0-1.module_el9.4.0+66+eb9878bc | ALSA-2024:10788 |
| AlmaLinux:9 | pgaudit | 1.7.0-1.module_el9.3.0+52+21733919 | ALSA-2024:10787 |
| AlmaLinux:9 | pgvector | 0.6.2-1.module_el9.5.0+120+4533eb20 | ALSA-2024:10788 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.9.0+3704+f1f917ce | ALSA-2024:10832 |
| AlmaLinux:8 | postgres-decoderbufs | 2.4.0-1.Final.module_el8.10.0+3798+606ebb9f | ALSA-2024:10831 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2024:10785 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+3095+ee60d910 | ALSA-2024:10785 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.9.0+3704+f1f917ce | ALSA-2024:10785 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+3095+ee60d910 | ALSA-2024:10832 |
| AlmaLinux:8 | postgres-decoderbufs | 1.9.7-1.Final.module_el8.9.0+3706+885c732e | ALSA-2024:10830 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2024:10832 |
| AlmaLinux:9 | postgres-decoderbufs | 2.4.0-1.Final.module_el9.4.0+66+eb9878bc | ALSA-2024:10788 |
| AlmaLinux:9 | postgres-decoderbufs | 1.9.7-1.Final.module_el9.3.0+52+21733919 | ALSA-2024:10787 |
| AlmaLinux:8 | postgresql | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:8 | postgresql | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:9 | postgresql | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:8 | postgresql-contrib | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-contrib | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-contrib | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-contrib | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:9 | postgresql-contrib | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-contrib | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-contrib | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-contrib | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:8 | postgresql-docs | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-docs | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:8 | postgresql-docs | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-docs | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:9 | postgresql-docs | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-docs | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-docs | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-docs | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:8 | postgresql-plperl | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-plperl | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:8 | postgresql-plperl | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-plperl | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:9 | postgresql-plperl | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-plperl | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-plperl | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:8 | postgresql-plpython3 | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:8 | postgresql-plpython3 | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-plpython3 | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-plpython3 | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:9 | postgresql-plpython3 | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-plpython3 | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-plpython3 | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-plpython3 | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:8 | postgresql-pltcl | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-pltcl | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-pltcl | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-pltcl | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:9 | postgresql-pltcl | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-pltcl | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-pltcl | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:8 | postgresql-private-devel | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-private-devel | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:9 | postgresql-private-devel | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-private-devel | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-private-devel | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-private-devel | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:8 | postgresql-private-libs | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-private-libs | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:9 | postgresql-private-libs | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-private-libs | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-private-libs | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-private-libs | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:8 | postgresql-server | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-server | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:8 | postgresql-server | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-server | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:9 | postgresql-server | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-server | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-server | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-server | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:8 | postgresql-server-devel | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-server-devel | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-server-devel | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-server-devel | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:9 | postgresql-server-devel | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-server-devel | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-server-devel | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-server-devel | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:8 | postgresql-static | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-static | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:8 | postgresql-static | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-static | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:9 | postgresql-static | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-static | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-static | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-static | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:8 | postgresql-test | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-test | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:8 | postgresql-test | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-test | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:9 | postgresql-test | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-test | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-test | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-test | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:8 | postgresql-upgrade | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:8 | postgresql-upgrade | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-upgrade | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-upgrade | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:9 | postgresql-upgrade | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-upgrade | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-upgrade | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-upgrade | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:8 | postgresql-upgrade-devel | 16.6-1.module_el8.10.0+3930+ecf33554 | ALSA-2024:10831 |
| AlmaLinux:8 | postgresql-upgrade-devel | 13.18-1.module_el8.10.0+3928+8233d274 | ALSA-2024:10832 |
| AlmaLinux:8 | postgresql-upgrade-devel | 15.10-1.module_el8.10.0+3929+38258aa5 | ALSA-2024:10830 |
| AlmaLinux:8 | postgresql-upgrade-devel | 12.22-1.module_el8.10.0+3927+7f0fab70 | ALSA-2024:10785 |
| AlmaLinux:9 | postgresql-upgrade-devel | 13.18-1.el9_5 | ALSA-2024:10791 |
| AlmaLinux:9 | postgresql-upgrade-devel | 15.10-1.module_el9.5.0+126+03d48c9f | ALSA-2024:10787 |
| AlmaLinux:9 | postgresql-upgrade-devel | 16.6-1.module_el9.5.0+128+1095dce2 | ALSA-2024:10788 |
| AlmaLinux:9 | postgresql-upgrade-devel | 16.6-1.module_el9.5.0+127+50ff03a9 | ALSA-2024:10788 |
| Alpine:v3.20 | postgresql14 | 14.14-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.20 | postgresql15 | 15.9-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.21 | postgresql15 | 15.9-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.22 | postgresql15 | 15.9-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.20 | postgresql16 | 16.5-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.21 | postgresql16 | 16.5-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.22 | postgresql16 | 16.5-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.23 | postgresql16 | 16.5-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.24 | postgresql16 | 16.5-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.21 | postgresql17 | 17.1-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.22 | postgresql17 | 17.1-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.23 | postgresql17 | 17.1-r0 | ALPINE-CVE-2024-10979 |
| Alpine:v3.24 | postgresql17 | 17.1-r0 | ALPINE-CVE-2024-10979 |
| Debian:12 | postgresql-15 | 15.9-0+deb12u1 | DSA-5812-1 |
| Debian:12 | postgresql-15 | 15.9-0+deb12u1 | DEBIAN-CVE-2024-10979 |
| Debian:13 | postgresql-17 | 17.1-1 | DEBIAN-CVE-2024-10979 |
| Rocky Linux:8 | pg_repack | 0:1.4.8-1.module+el8.10.0+1622+bd25b19c | RLSA-2024:10830 |
| Rocky Linux:8 | pg_repack | 0:1.5.1-1.module+el8.10.0+1900+d7340343 | RLSA-2024:10831 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.10.0+1862+29bef648 | RLSA-2024:10785 |
| Rocky Linux:9 | pg_repack | 0:1.5.1-1.module+el9.5.0+30638+72f697e1 | RLSA-2024:10788 |
| Rocky Linux:9 | pg_repack | 0:1.4.8-2.module+el9.5.0+30637+4391fcca | RLSA-2024:10787 |
| Rocky Linux:8 | pgaudit | 0:1.4.0-7.module+el8.9.0+1735+a332307b | RLSA-2024:10785 |
| Rocky Linux:8 | pgaudit | 0:1.7.0-1.module+el8.9.0+1525+fc91df60 | RLSA-2024:10830 |
| Rocky Linux:8 | pgaudit | 0:16.0-1.module+el8.10.0+1622+bd25b19c | RLSA-2024:10831 |
| Rocky Linux:9 | pgaudit | 0:1.7.0-1.module+el9.5.0+30637+4391fcca | RLSA-2024:10787 |
| Rocky Linux:9 | pgaudit | 0:16.0-1.module+el9.5.0+30638+72f697e1 | RLSA-2024:10788 |
| Rocky Linux:9 | pgvector | 0:0.6.2-1.module+el9.5.0+30638+72f697e1 | RLSA-2024:10788 |
| Rocky Linux:8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+1622+bd25b19c | RLSA-2024:10831 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.10.0+1862+29bef648 | RLSA-2024:10785 |
| Rocky Linux:8 | postgres-decoderbufs | 0:1.9.7-1.Final.module+el8.9.0+1525+fc91df60 | RLSA-2024:10830 |
| Rocky Linux:9 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el9.5.0+30638+72f697e1 | RLSA-2024:10788 |
| Rocky Linux:9 | postgres-decoderbufs | 0:1.9.7-1.Final.module+el9.5.0+30637+4391fcca | RLSA-2024:10787 |
| Rocky Linux:8 | postgresql | 0:12.22-1.module+el8.10.0+1897+c7883fde | RLSA-2024:10785 |
| Rocky Linux:8 | postgresql | 0:15.10-1.module+el8.10.0+1899+05bbdd2c | RLSA-2024:10830 |
| Rocky Linux:8 | postgresql | 0:16.6-1.module+el8.10.0+1900+d7340343 | RLSA-2024:10831 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.15-0ubuntu0.22.04.1 | USN-7132-1 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.15-0ubuntu0.22.04.1 | UBUNTU-CVE-2024-10979 |
| Ubuntu:24.04:LTS | postgresql-16 | 16.6-0ubuntu0.24.04.1 | USN-7132-1 |
| Ubuntu:24.04:LTS | postgresql-16 | 16.6-0ubuntu0.24.04.1 | UBUNTU-CVE-2024-10979 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | PostgreSQL | 17 – before 17.116 – before 16.515 – before 15.914 – before 14.1413 – before 13.170 – before 12.21 |
Weakness: CWE-15 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H