Search CVE reports
21 – 30 of 167 results
Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as the operating system user running the database, via oversized tuple data. Versions before PostgreSQL 18.7,...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Type confusion in PostgreSQL operator commutator and negator links allows an object creator to execute arbitrary code as the operating system user running the database, via linking operators having different result types or...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Buffer over-read in PostgreSQL parallel B-tree scans allows an object creator to read attacker-chosen server-memory addresses, via a function incorrectly marked PARALLEL SAFE or STABLE to make participating workers build different...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Type confusion in PostgreSQL min/max aggregate optimization allows an object creator to execute arbitrary code as the operating system user running the database, via a user-defined aggregate whose SORTOP option causes the planner...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Exposure of sensitive information in PostgreSQL security_barrier processing allows a database user to infer values hidden by a security_barrier view, via applying a leaky function to a CASE test value or internal parameter that...
7 affected packages
postgresql-18, postgresql-16, postgresql-14, postgresql-12, postgresql-10...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |