Описание
Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
A flaw was found in PostgreSQL pg_dump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating system user running pg_dump.
Отчет
Important: A heap buffer overflow in PostgreSQL pg_dump allows authenticated database users to execute arbitrary code. Attackers with object-creation privileges can use crafted function transform lists to run OS commands as the backup user.
Меры по смягчению последствий
Restrict database user privileges, particularly object creation, to trusted administrators only. Ensure that pg_dump operations are performed by users with the least necessary operating system privileges to limit the impact of potential code execution.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | postgresql | Not affected | ||
| Red Hat Enterprise Linux 7 | postgresql | Not affected | ||
| Red Hat Hardened Images | postgresql18 | Not affected | ||
| Red Hat Enterprise Linux 10 | postgresql18 | Fixed | RHSA-2026:67280 | 14.09.2026 |
| Red Hat Enterprise Linux 10 | postgresql16 | Fixed | RHSA-2026:70186 | 22.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | postgresql16 | Fixed | RHSA-2026:72282 | 28.09.2026 |
| Red Hat Enterprise Linux 8 | postgresql | Fixed | RHSA-2026:69876 | 22.09.2026 |
| Red Hat Enterprise Linux 8 | postgresql | Fixed | RHSA-2026:69923 | 22.09.2026 |
| Red Hat Enterprise Linux 8 | postgresql | Fixed | RHSA-2026:69924 | 23.09.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | postgresql | Fixed | RHSA-2026:73912 | 30.09.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
8.8 High
CVSS3
Связанные уязвимости
Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
PostgreSQL pg_dump heap buffer overflow executes arbitrary code
Heap buffer overflow in PostgreSQL pg_dump of long function transform ...
Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
EPSS
8.8 High
CVSS3