Threats Tagged 'cve-2026-6477'

This security update for postgresql17 addresses multiple vulnerabilities by updating to version 17. 10. The fixes include privilege checks, integer overflow prevention, protection against malicious time zone names, path traversal prevention, proper quoting of subscription and object names, marking unsafe functions, timing-safe string comparisons, recursion limits, and prevention of SQL injection and buffer overruns. Non-security improvements related to system updates are also included.

CVE-2026-6477 is a high-severity vulnerability in PostgreSQL affecting versions before 18. 4, 17. 10, 16. 14, 15. 18, and 14. 23. It involves the use of an inherently dangerous function PQfn in libpq functions lo_export(), lo_read(), lo_lseek64(), and lo_tell64(), which allows the server superuser to overwrite a client stack buffer with arbitrarily large data. This vulnerability can lead to memory corruption in client tools such as psql and pg_dump that invoke these functions. The flaw arises because PQfn stores server-determined data of arbitrary length into a buffer without size constraints, similar to the unsafe gets() function. No official patch or remediation level is currently provided in the available data.