Threats tagged 'ghsa-3jp2-46gg-vhpr'

A use-after-free vulnerability exists in PostgreSQL's pg_show_all_settings() function that allows a database user to retrieve memory contents. This occurs when loading a module while the function scans custom-variable placeholders that the module replaces and frees. The issue affects PostgreSQL major versions 16 through 18, specifically versions prior to 18.7, 17.12, and 16.16. Versions before 16 are not affected.