Threats tagged 'ghsa-62q4-hc79-94qj'

A vulnerability in PostgreSQL allows a client to use server error messages from a server not trusted under current SSL or GSS settings to supply arbitrary non-NUL bytes to the libpq application. This can enable a man-in-the-middle attacker to send a long error message that may be mistaken by users or screen-scraping tools for valid query results. This issue affects PostgreSQL versions prior to 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21.