Threats tagged 'ghsa-ph4f-5226-ph6w'

A use-after-free vulnerability exists in PostgreSQL's COPY FROM error reporting, allowing a database user to potentially disclose portions of server memory. This occurs when a longer input row follows an ignored or nullified conversion error. The file_fdw feature also reaches the same vulnerable code path. Affected versions include minor releases before PostgreSQL 18.7 and 17.12 within major versions 17 and 18. Versions prior to 17 are not affected.