CVE-2023-39418

A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows.

CVSS v3.0 4.3 MEDIUM

4.3^/10

CVSS v3.0 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=cb2ae5741f2458a474ed3c31458d242e678ff229	Mailing List Patch
https://access.redhat.com/security/cve/CVE-2023-39418	Third Party Advisory
https://www.postgresql.org/support/security/CVE-2023-39418/	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2228112	Issue Tracking Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20230915-0002/
https://www.debian.org/security/2023/dsa-5553
https://access.redhat.com/errata/RHSA-2023:7785
https://access.redhat.com/errata/RHSA-2023:7883
https://access.redhat.com/errata/RHSA-2023:7884
https://access.redhat.com/errata/RHSA-2023:7885

Configurations

Configuration 1 (hide)

cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*

Information

Published : 2023-08-11 13:15

Updated : 2023-12-20 15:15

NVD link : CVE-2023-39418

Mitre link : CVE-2023-39418

JSON object : View

Products Affected

redhat

enterprise_linux

postgresql

postgresql

CWE

NVD-CWE-noinfo

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=cb2ae5741f2458a474ed3c31458d242e678ff229", "name": "https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=cb2ae5741f2458a474ed3c31458d242e678ff229", "tags": ["Mailing List", "Patch"], "refsource": "MISC"}, {"url": "https://access.redhat.com/security/cve/CVE-2023-39418", "name": "https://access.redhat.com/security/cve/CVE-2023-39418", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://www.postgresql.org/support/security/CVE-2023-39418/", "name": "https://www.postgresql.org/support/security/CVE-2023-39418/", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2228112", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2228112", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://security.netapp.com/advisory/ntap-20230915-0002/", "name": "https://security.netapp.com/advisory/ntap-20230915-0002/", "tags": [], "refsource": "MISC"}, {"url": "https://www.debian.org/security/2023/dsa-5553", "name": "https://www.debian.org/security/2023/dsa-5553", "tags": [], "refsource": ""}, {"url": "https://access.redhat.com/errata/RHSA-2023:7785", "name": "RHSA-2023:7785", "tags": [], "refsource": ""}, {"url": "https://access.redhat.com/errata/RHSA-2023:7883", "name": "RHSA-2023:7883", "tags": [], "refsource": ""}, {"url": "https://access.redhat.com/errata/RHSA-2023:7884", "name": "RHSA-2023:7884", "tags": [], "refsource": ""}, {"url": "https://access.redhat.com/errata/RHSA-2023:7885", "name": "RHSA-2023:7885", "tags": [], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2023-39418", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}}, "publishedDate": "2023-08-11T13:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "15.4", "versionStartIncluding": "15.0"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-12-20T15:15Z"}