Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f3vj-j2m6-8hfj

Опубликовано: 12 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

EPSS

Процентиль: 17%
0.00056
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1287

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 1 месяца назад

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 4.3
redhat
около 1 месяца назад

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 4.3
nvd
около 1 месяца назад

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 4.3
debian
около 1 месяца назад

Improper validation of type "oidvector" in PostgreSQL allows a databas ...

CVSS3: 4.3
fstec
около 1 месяца назад

Уязвимость функции обработки типов данных oidvector системы управления базами данных PostgreSQL, позволяющая нарушителю раскрыть байты памяти сервера и получить доступ к конфиденциальной информации

EPSS

Процентиль: 17%
0.00056
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1287