CVE-2024-0985

27

FAUCET Score

CVE-2024-0985 is a high-severity privilege escalation vulnerability in PostgreSQL versions prior to 16.2, 15.6, 14.11, 13.14, and 12.18. It allows an attacker to execute arbitrary SQL functions as a superuser or other privileged user by luring them into running REFRESH MATERIALIZED VIEW CONCURRENTLY on a specially crafted materialized view. The vulnerability has a CVSS score of 8.0 (High) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 12.0, < 12.18CPE matchmatch criteria	cpe:2.3:a:postgresql:postgresql::::::::
		>= 13.0, < 13.14CPE matchmatch criteria	cpe:2.3:a:postgresql:postgresql::::::::
		>= 14.0, < 14.11CPE matchmatch criteria	cpe:2.3:a:postgresql:postgresql::::::::
		>= 15.0, < 15.6CPE matchmatch criteria	cpe:2.3:a:postgresql:postgresql::::::::

CVSS Data

CVSS version used by this source: 3.1

8.0HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

2.1

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.47%

Probability of exploitation in next 30 days

EPSS Percentile

71.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0146 is in the 87th percentile among its peer group of 890 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (55)

beckhoffpatch availablevia llm_extracted

Fixed in: 16.2, 15.6, 14.11

dhis2patch availablevia llm_extracted

Fixed in: 16.2, 15.6, 14.11

fortinetpatch availablevia llm_extracted

Fixed in: 16.2, 15.6, 14.11

microsoftpatch availablevia msrc

Product: 17740-17084Fixed in: 16.3-1

microsoftpatch availablevia msrc

Product: 20046-17084Fixed in: 16.3-1

microsoftpatch availablevia msrc

Product: 17442-16823Fixed in: 14.11-1

microsoftpatch availablevia msrc

Product: 18239-17086Fixed in: 14.11-1

microsoftpatch availablevia msrc

Product: 20042-17086Fixed in: 14.11-1

microsoftpatch availablevia msrc

Product: azl3 postgresql 16.1-1 on Azure Linux 3.0Fixed in: 16.3-1

microsoftpatch availablevia msrc

Product: CBL Mariner 2.0 x64Fixed in: 14.11-1

microsoftpatch availablevia msrc

Product: CBL Mariner 2.0 ARMFixed in: 14.11-1

microsoftpatch availablevia msrc

Product: Azure Linux 3.0 x64Fixed in: 16.3-1

microsoftpatch availablevia msrc

Product: Azure Linux 3.0 ARMFixed in: 16.3-1

microsoftpatch availablevia msrc

Product: cbl2 postgresql 14.11-1 on CBL Mariner 2.0Fixed in: 14.11-1

microsoftpatch availablevia msrc

Product: cbl2 postgresql 14.10-1 on CBL Mariner 2.0Fixed in: 14.11-1

microsoftpatch availablevia msrc

Product: azl3 postgresql 16.3-1 on Azure Linux 3.0Fixed in: 16.3-1

miniopatch availablevia llm_extracted

Fixed in: 16.2, 15.6, 14.11

navidromepatch availablevia llm_extracted

Fixed in: 16.2, 15.6, 14.11

netscoutpatch availablevia llm_extracted

Fixed in: 16.2, 15.6, 14.11

new_relicpatch availablevia llm_extracted

Fixed in: 16.2, 15.6, 14.11

nvidiapatch availablevia llm_extracted

Fixed in: 16.2, 15.6, 14.11

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: postgresql:10-8060020240220155541.ad008a3a

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: postgresql:15-8080020240220104521.63b34585

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: postgresql:12-8080020240214025906.63b34585

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: postgresql:13-8080020240221110841.63b34585

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: postgresql:10-8080020240227061409.63b34585

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: postgresql:15-9030020240209100638.rhel9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: postgresql-0:13.14-1.el9_3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: postgresql-0:13.14-1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: postgresql-0:13.14-1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: postgresql:15-9020020240213145157.rhel9

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-postgresql13-postgresql-0:13.14-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-postgresql12-postgresql-0:12.18-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: postgresql:10-8090020240213200157.a75119d5

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-postgresql10-postgresql-0:10.23-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: postgresql:15-8090020240209124629.a75119d5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: postgresql:12-8090020240209130909.a75119d5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: postgresql:13-8090020240209125046.a75119d5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: postgresql:12-8020020240214021628.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: postgresql:10-8020020240229083218.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: postgresql:12-8020020240214021628.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: postgresql:10-8020020240229083218.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: postgresql:12-8020020240214021628.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: postgresql:10-8020020240229083218.4cda2c84

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: postgresql:12-8040020240214080556.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: postgresql:10-8040020240226112406.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: postgresql:13-8040020240222071300.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: postgresql:12-8040020240214080556.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: postgresql:10-8040020240226112406.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: postgresql:13-8040020240222071300.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: postgresql:12-8040020240214080556.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: postgresql:10-8040020240226112406.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: postgresql:13-8040020240222071300.522a0ee4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: postgresql:12-8060020240214083443.ad008a3a

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: postgresql:13-8060020240219120118.ad008a3a

Vendor Advisories (11)

microsoft2024-Jun/CVE-2024-0985

CVE-2024-0985

microsoft2024-Feb/CVE-2024-0985Important

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

redhatCVE-2024-0985Important

postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL

fortinetllm-fortinet-ab1f72894a72a110HIGH

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

netscoutllm-netscout-0aaca60be8decbf5HIGH

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

beckhoffllm-beckhoff-122e6b20d506f536HIGH

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

new_relicllm-new_relic-3e6b16a291d5b3ebHIGH

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

dhis2llm-dhis2-f5c19d3ad8048711HIGH

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

miniollm-minio-6104be33272a5eebHIGH

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

navidromellm-navidrome-4c602e306e2396feHIGH

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

nvidiallm-nvidia-f112a726998e5653HIGH

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

References

security.netapp.com / advisory/ntap-20241220-0005

lists.debian.org / debian-lts-announce/2024/03/msg00017.html

saites.dev / projects/personal/postgres-cve-2024-0985

postgresql.org / support/security/CVE-2024-0985

Vendor Advisory