Threats tagged 'ghsa-g64g-7679-7c73'

A heap-based buffer overflow vulnerability exists in the TDS prelogin parser of the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4, and in Amazon Aurora PostgreSQL with Babelfish. This flaw allows remote attackers to execute arbitrary OS commands as the database process user by sending a specially crafted malformed TDS prelogin packet to the TDS port. A related NULL-pointer dereference issue in the same parser is also consolidated in this record. Users are advised to upgrade to fixed versions or apply recommended workarounds.