postgresql-cve-2026-14662

追踪 CVE-2026-14662 — PostgreSQL 全文搜索的越界写入漏洞 针对 PostgreSQL 全文搜索数据类型（tsvector / tsquery）中发现的 CVE-2026-14662， 本文记录了在 Docker 中同时运行修复前（18.4）与修复后（18.6）版本，并实际观察行为差异 的过程。 本内容为安全学习用途整理，并附带演示资料。 该漏洞概要 项目| 内容 ---|--- CVE| CVE-2026-14662 对象| PostgreSQL 的 tsvector / tsquery 类型| 整数回绕导致的分配大小不足与越界写入 CVSS| 8.8 /...

Oracle Linux 9 : postgresql (ELSA-2026-69607)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69607 advisory. - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - F...

postgresql security update

13.23-6 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix...

ROOT-OS-DEBIAN-11-CVE-2026-14662 CVE-2026-14662 in postgresql-13 - Patched by Root

Root has patched CVE-2026-14662 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-14662

creationtimestamp| type| source ---|---|--- 2026-08-20 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtjymlmb4n2v 2026-09-02 01:00:04+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg 2026-09-03 00:01:00+00:00| published-proof-of-concep...

CVE-2026-14662 affecting package postgresql for versions less than 16.15-1

CVE-2026-14662 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

OESA-2026-3422 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

OESA-2026-3421 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

BELL-CVE-2026-14662

Bulletin has no description...

DEBIAN-CVE-2026-14662

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These...