Поиск уязвимостей
Количество 13
Количество 13
CVE-2026-73515
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.
CVE-2026-73515
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.
CVE-2026-73515
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.
CVE-2026-73515
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability ...
RLSA-2026:67166
Important: postgresql18-postgis security update
RLSA-2026:65899
Important: postgresql16-postgis security update
GHSA-qv7r-wgc7-6mc6
PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.
ELSA-2026-67166-0
ELSA-2026-67166-0: postgresql18-postgis security update (IMPORTANT)
ELSA-2026-65899-0
ELSA-2026-65899-0: postgresql16-postgis security update (IMPORTANT)
RLSA-2026:67491
Important: postgresql:16 security update
ELSA-2026-67491
ELSA-2026-67491: postgresql:16 security update (IMPORTANT)
RLSA-2026:67848
Important: postgresql:18 security update
ELSA-2026-67848
ELSA-2026-67848: postgresql:18 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-73515 PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service. | CVSS3: 8.1 | 1% Низкий | 3 месяца назад |
 | CVE-2026-73515 PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service. | CVSS3: 8.1 | 1% Низкий | 3 месяца назад |
 | CVE-2026-73515 PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service. | CVSS3: 8.1 | 1% Низкий | 3 месяца назад |
| CVE-2026-73515 PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability ... | CVSS3: 8.1 | 1% Низкий | 3 месяца назад |
 | RLSA-2026:67166 Important: postgresql18-postgis security update | 1% Низкий | около 2 месяцев назад | |
| RLSA-2026:65899 Important: postgresql16-postgis security update | 1% Низкий | около 2 месяцев назад | |
| GHSA-qv7r-wgc7-6mc6 PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service. | CVSS3: 8.1 | 1% Низкий | 3 месяца назад |
| ELSA-2026-67166-0 ELSA-2026-67166-0: postgresql18-postgis security update (IMPORTANT) | 1% Низкий | около 2 месяцев назад | |
| ELSA-2026-65899-0 ELSA-2026-65899-0: postgresql16-postgis security update (IMPORTANT) | 1% Низкий | около 2 месяцев назад | |
| RLSA-2026:67491 Important: postgresql:16 security update | около 2 месяцев назад | ||
| ELSA-2026-67491 ELSA-2026-67491: postgresql:16 security update (IMPORTANT) | около 2 месяцев назад | ||
| RLSA-2026:67848 Important: postgresql:18 security update | около 2 месяцев назад | ||
| ELSA-2026-67848 ELSA-2026-67848: postgresql:18 security update (IMPORTANT) | около 2 месяцев назад |
Уязвимостей на страницу