Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qhm2-px33-58v8

Опубликовано: 14 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

EPSS

Процентиль: 12%
0.00214
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-134

Связанные уязвимости

CVSS3: 4.3
ubuntu
3 месяца назад

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

CVSS3: 4.3
redhat
3 месяца назад

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

CVSS3: 4.3
nvd
3 месяца назад

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

CVSS3: 4.3
msrc
3 месяца назад

PostgreSQL timeofday() can disclose portions of server memory

CVSS3: 4.3
debian
3 месяца назад

Externally-controlled format string in PostgreSQL timeofday() function ...

EPSS

Процентиль: 12%
0.00214
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-134