Improper Preservation of Consistency Between Independent Representations of Shared State

Overview Affected versions of this package are vulnerable to Improper Preservation of Consistency Between Independent Representations of Shared State due to incomplete tracking of changes in role membership, role attributes, and database ownership in the plan reuse process. An attacker can access...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the plperl function when returning a tied hash. An attacker can execute arbitrary code as the operating system user running the database by crafting a malicious function body. Remediation Upgrade libpq to...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' via the selectivity estimator process. An attacker can access calculated data derived from arbitrary 4-byte memory locations by providing specially crafted non-ctid input...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via crafted large inputs to the tsvector and tsquery functions. An attacker can execute arbitrary code as the operating system user running the database by causing the server to allocate insufficient memor...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the tochar function when processing a long POSIX timezone abbreviation. An attacker can execute arbitrary code as the operating system user running the database by supplying a specially crafted timezone...

Cleartext Storage in a File or on Disk

Overview Affected versions of this package are vulnerable to Cleartext Storage in a File or on Disk in the pgcrypto process when OpenSSL-disabled ciphers are used. An attacker can access sensitive information and potentially modify data by observing the faulty ciphertext or submitting encrypted...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' via the refint process. An attacker can execute arbitrary code as the operating system user running the database by creating a specially crafted object. Remediation Upgrade lib...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' via the internal argument type in certain function calls. An attacker can execute arbitrary code as the operating system user running the database by invoking functions with...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the EXTRACT process. An attacker can execute arbitrary SQL commands with superuser privileges by crafting a malicious object definition that is processed by expression deparse consumers, such as pgdump, psql commands...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the authentication process. An attacker can determine whether a specific user exists by observing differences in the SCRAM authentication challenge when the targeted user has a non-default scramiterations value...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path via the amcheck function. An attacker can execute arbitrary functions with the privileges of expression index owners by setting a malicious search path prior to invoking the amcheck function. Remediation Upgrade...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read in the picksplit process. An attacker can infer limited memory values by observing the behavior of index split choices. Remediation Upgrade libpq to version 14.24, 15.19, 16.15, 17.11 or higher. References - Postgres...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the argument name matching process. An attacker can cause unauthorized memory modification and potentially disrupt server operation by supplying specially crafted OUT parameter counts. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via crafted function bodies in the pltcl or plperl process. An attacker can execute arbitrary code as the operating system user running the database by causing undersized memory allocations and writing...

Integer Underflow (Wrap or Wraparound)

Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound via the ECPG process. An attacker can cause the client to overwrite a large memory region with uncontrolled bytes by sending a specially crafted bytea value lacking the required prefix. This can resu...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' in the portal lifecycle when a cursor is closed and then re-declared with different types. An attacker can execute arbitrary code as the operating system user running the...

Unsafe Dependency Resolution

Overview Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the \unrestrict meta-command input expansion in the restore process. An attacker can execute arbitrary code as the client operating system account by injecting malicious input from a compromised origin...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the pgdump process when handling crafted transform lists. An attacker can execute arbitrary code as the operating system user running pgdump by supplying a specially crafted transform list. Remediation...

Unsafe Dependency Resolution

Overview Affected versions of this package are vulnerable to Unsafe Dependency Resolution in the COPY FROM STDIN process. An attacker can execute arbitrary commands by injecting specially crafted data lines when an early failure occurs before the server signals readiness for input rows. This is...

Incorrect Ownership Assignment

Overview Affected versions of this package are vulnerable to Incorrect Ownership Assignment in the ALTER TABLE ALTER TYPE process. An attacker can gain unauthorized ability to execute DROP STATISTICS and ALTER STATISTICS on affected objects by exploiting improper reassignment of ownership...