Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f8xc-gmqx-v9fh

Опубликовано: 14 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

EPSS

Процентиль: 11%
0.00208
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-126

Связанные уязвимости

CVSS3: 4.3
ubuntu
3 месяца назад

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

CVSS3: 4.3
redhat
3 месяца назад

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

CVSS3: 4.3
nvd
3 месяца назад

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

CVSS3: 4.3
debian
3 месяца назад

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() a ...

CVSS3: 4.3
fstec
3 месяца назад

Уязвимость функции pg_restore_attribute_stats() системы управления базами данных PostgreSQL, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 11%
0.00208
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-126