Threats tagged 'ghsa-gjgq-ff5c-x6hp'

A buffer over-read vulnerability exists in PostgreSQL parallel B-tree scans that allows an object creator to read server memory chosen by an attacker. This occurs due to a function incorrectly marked as PARALLEL SAFE or STABLE, causing different scan-key arrays to be built by participating workers. The issue affects PostgreSQL major versions 17 and 18, specifically versions before 17.12 and 18.7. Versions prior to 17 are not affected.