Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mq5v-x68w-mc4f

Опубликовано: 12 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

EPSS

Процентиль: 25%
0.00087
Низкий

8.8 High

CVSS3

Дефекты

CWE-129

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 1 месяца назад

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
redhat
около 1 месяца назад

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
nvd
около 1 месяца назад

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
debian
около 1 месяца назад

Missing validation of multibyte character length in PostgreSQL text ma ...

suse-cvrf
22 дня назад

Security update for postgresql17

EPSS

Процентиль: 25%
0.00087
Низкий

8.8 High

CVSS3

Дефекты

CWE-129