Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-r1jj-5z1j-9qe5
Vulnerability ID VCID-r1jj-5z1j-9qe5
Aliases CVE-2023-5868
Summary postgresql: Memory disclosure in aggregate function calls
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5868.json
https://api.first.org/data/v1/epss?cve=CVE-2023-5868
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39417
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5868
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5869
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5870
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
https://www.postgresql.org/support/security/CVE-2023-5868/
1056283 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056283
2247168 https://bugzilla.redhat.com/show_bug.cgi?id=2247168
GLSA-202408-06 https://security.gentoo.org/glsa/202408-06
RHSA-2023:7545 https://access.redhat.com/errata/RHSA-2023:7545
RHSA-2023:7579 https://access.redhat.com/errata/RHSA-2023:7579
RHSA-2023:7580 https://access.redhat.com/errata/RHSA-2023:7580
RHSA-2023:7581 https://access.redhat.com/errata/RHSA-2023:7581
RHSA-2023:7616 https://access.redhat.com/errata/RHSA-2023:7616
RHSA-2023:7656 https://access.redhat.com/errata/RHSA-2023:7656
RHSA-2023:7666 https://access.redhat.com/errata/RHSA-2023:7666
RHSA-2023:7667 https://access.redhat.com/errata/RHSA-2023:7667
RHSA-2023:7694 https://access.redhat.com/errata/RHSA-2023:7694
RHSA-2023:7695 https://access.redhat.com/errata/RHSA-2023:7695
RHSA-2023:7714 https://access.redhat.com/errata/RHSA-2023:7714
RHSA-2023:7770 https://access.redhat.com/errata/RHSA-2023:7770
RHSA-2023:7772 https://access.redhat.com/errata/RHSA-2023:7772
RHSA-2023:7784 https://access.redhat.com/errata/RHSA-2023:7784
RHSA-2023:7785 https://access.redhat.com/errata/RHSA-2023:7785
RHSA-2023:7883 https://access.redhat.com/errata/RHSA-2023:7883
RHSA-2023:7884 https://access.redhat.com/errata/RHSA-2023:7884
RHSA-2023:7885 https://access.redhat.com/errata/RHSA-2023:7885
RHSA-2024:0304 https://access.redhat.com/errata/RHSA-2024:0304
RHSA-2024:0332 https://access.redhat.com/errata/RHSA-2024:0332
RHSA-2024:0337 https://access.redhat.com/errata/RHSA-2024:0337
USN-6538-1 https://usn.ubuntu.com/6538-1/
USN-6538-2 https://usn.ubuntu.com/6538-2/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5868.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)
Percentile 0.86176
EPSS Score 0.02718
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T09:05:34.137551+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5868.json 38.6.0