Detections
Analytics

Echo: postgresql-13: security update to 13.13

medium Tenable Cloud Security Plugin ID 459966

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive
 information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling
 'unknown'-type values from string literals without type designation can disclose bytes, potentially
 revealing notable and confidential information. This issue exists due to excessive data output in
 aggregate function calls, enabling remote users to read some portion of system memory. (CVE-2023-5868)

Solution

Update the postgresql-13 library and its related packages to version 13.13 or later.

See Also

https://advisory.echohq.com/cve/CVE-2023-5868

Plugin Details

Severity: Medium

ID: 459966

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3.2

Percentile: 51.15

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2023-5868

CVSS v3

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/20/2026

Vulnerability Publication Date: 11/9/2023

Reference Information

CVE: CVE-2023-5868