Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-15742

Опубликовано: 14 авг. 2026
Источник: msrc
CVSS3: 8.8
EPSS Низкий

Описание

PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound

EPSS

Процентиль: 39%
0.00479
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
10 дней назад

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

CVSS3: 8.8
nvd
10 дней назад

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

CVSS3: 8.8
debian
10 дней назад

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct ...

CVSS3: 8.8
github
10 дней назад

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

CVSS3: 8.8
fstec
11 дней назад

Уязвимость функций levenshtein() и levenshtein_less_equal() расширения fuzzystrmatch системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 39%
0.00479
Низкий

8.8 High

CVSS3