Is CVE-2023-5869 being actively exploited?

CVE-2023-5869 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2023-5869?

CVE-2023-5869 has a CVSS 3.1 base score of 8.8 (HIGH).

CVE-2023-5869

HIGH · CVSS 8.8EPSS 4.3%EU EUVD

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.

Key facts

CVSS score: 8.8 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-190
EPSS score: 4.3% (91th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2023-58143)
Published: December 10, 2023
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2023-58143 in the EU Vulnerability Database. Last updated in EUVD on March 11, 2026.

View on the EU Vulnerability Database

Affected products

postgresql / postgresql
postgresql / postgresql
redhat / codeready linux builder eus
redhat / codeready linux builder eus for power little endian eus
redhat / codeready linux builder eus for power little endian eus
redhat / codeready linux builder for arm64 eus
redhat / codeready linux builder for arm64 eus
redhat / codeready linux builder for arm64 eus
redhat / codeready linux builder for ibm z systems eus
redhat / codeready linux builder for ibm z systems eus
redhat / codeready linux builder for power little endian eus
redhat / codeready linux builder for power little endian eus
redhat / enterprise linux
redhat / enterprise linux
redhat / enterprise linux desktop
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux for arm 64
redhat / enterprise linux for arm 64
redhat / enterprise linux for ibm z systems
redhat / enterprise linux for ibm z systems
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for power big endian
redhat / enterprise linux for power little endian
redhat / enterprise linux for power little endian
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for scientific computing
redhat / enterprise linux server
redhat / enterprise linux server aus
redhat / enterprise linux server aus
redhat / enterprise linux server aus
redhat / enterprise linux server aus
redhat / enterprise linux server tus
redhat / enterprise linux server tus
redhat / enterprise linux server tus
redhat / enterprise linux workstation
redhat / software collections

Certified products that may be affected

33 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat, Inc. - FIPS 140 5513 - active
Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, LLC - FIPS 140 5461 - active
Red Hat Enterprise Linux 9 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5445 - active
Red Hat Enterprise Linux 9 libgcrypt - Red Hat, Inc. - FIPS 140 5366 - active
Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5089 - active

See all 33 in the Security Certifications Explorer.

References

https://access.redhat.com/errata/RHSA-2023:7545(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7579(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7580(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7581(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7616(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7656(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7666(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7667(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7694(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7695(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7714(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7770(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7771(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7772(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7778(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7783(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2023:7784
https://access.redhat.com/errata/RHSA-2023:7785
https://access.redhat.com/errata/RHSA-2023:7786
https://access.redhat.com/errata/RHSA-2023:7788
https://access.redhat.com/errata/RHSA-2023:7789
https://access.redhat.com/errata/RHSA-2023:7790
https://access.redhat.com/errata/RHSA-2023:7878
https://access.redhat.com/errata/RHSA-2023:7883
https://access.redhat.com/errata/RHSA-2023:7884
https://access.redhat.com/errata/RHSA-2023:7885
https://access.redhat.com/errata/RHSA-2024:0304
https://access.redhat.com/errata/RHSA-2024:0332
https://access.redhat.com/errata/RHSA-2024:0337
https://access.redhat.com/security/cve/CVE-2023-5869(Third Party Advisory)
https://bugzilla.redhat.com/show_bug.cgi?id=2247169(Issue Tracking)
https://lists.debian.org/debian-lts-announce/2023/11/msg00007.html
https://security.netapp.com/advisory/ntap-20240119-0003/
https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/(Release Notes)
https://www.postgresql.org/support/security/CVE-2023-5869/(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain