Описание
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes (0x0 and 0x1) to server memory, which may lead to unknown impacts.
Отчет
This Important PostgreSQL stack buffer overflow allows an authenticated object creator to trigger unknown impacts by manipulating OUT parameter counts. While requiring existing database privileges, successful exploitation could lead to service disruption and minor data integrity issues, elevating the risk beyond a Moderate classification.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | postgresql | Out of support scope | ||
| Red Hat Hardened Images | postgresql17 | Not affected | ||
| Red Hat Hardened Images | postgresql18 | Not affected | ||
| Red Hat Enterprise Linux 10 | postgresql18 | Fixed | RHSA-2026:67280 | 14.09.2026 |
| Red Hat Enterprise Linux 10 | postgresql16 | Fixed | RHSA-2026:70186 | 22.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | postgresql16 | Fixed | RHSA-2026:72282 | 28.09.2026 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | postgresql | Fixed | RHSA-2026:84585 | 19.10.2026 |
| Red Hat Enterprise Linux 8 | postgresql | Fixed | RHSA-2026:69876 | 22.09.2026 |
| Red Hat Enterprise Linux 8 | postgresql | Fixed | RHSA-2026:69923 | 22.09.2026 |
| Red Hat Enterprise Linux 8 | postgresql | Fixed | RHSA-2026:69924 | 23.09.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
Stack buffer overflow in PostgreSQL argument name matching allows an o ...
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
Уязвимость системы управления базами данных PostgreSQL, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
EPSS
7.1 High
CVSS3