Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mq5v-x68w-mc4f

Опубликовано: 12 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

EPSS

Процентиль: 47%
0.00659
Низкий

8.8 High

CVSS3

Дефекты

CWE-129

Связанные уязвимости

CVSS3: 8.8
ubuntu
4 месяца назад

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
redhat
4 месяца назад

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
nvd
4 месяца назад

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
debian
4 месяца назад

Missing validation of multibyte character length in PostgreSQL text ma ...

suse-cvrf
4 месяца назад

Security update for postgresql17

EPSS

Процентиль: 47%
0.00659
Низкий

8.8 High

CVSS3

Дефекты

CWE-129