Threat Intelligence Database

An integer underflow vulnerability exists in PostgreSQL ECPG client that can cause the client to crash when processing a bytea value missing its mandatory prefix. This flaw allows a database server administrator to trigger a temporary denial of service against the ECPG client. The client may overwrite a large memory region with uncontrolled bytes, typically resulting in a segmentation fault (SIGSEGV). In rare cases, this could lead to client-specific integrity impacts. Versions before PostgreSQL 14.24, 15.19, 16.15, 17.11, and 18.6 are affected.

A vulnerability in PostgreSQL's amcheck extension allows a user with EXECUTE privilege on the amcheck function to execute arbitrary functions as owners of expression indexes by manipulating the search path. This affects PostgreSQL major versions 14, 15, 16, and 18 in specific minor versions before 14.24, 15.19, 16.15, and 18.5 respectively. PostgreSQL 17 is not affected. The issue arises from not clearing an untrusted search path before executing the function.

A heap buffer overflow vulnerability exists in PostgreSQL's to_char function for timestamptz data types. This flaw allows an attacker who controls the timezone input to execute arbitrary code with the privileges of the database operating system user by providing a long POSIX timezone abbreviation. Multiple PostgreSQL versions prior to 14.24, 15.19, 16.15, 17.11, and 18.5 are affected. A patch is available to address this issue.