Threats tagged 'ghsa-rvq6-xp6x-5575'

An integer wraparound vulnerability in the PostgreSQL fuzzystrmatch extension allows a user with limited privileges to cause arbitrary memory writes. This can lead to execution of arbitrary code with the operating system privileges of the database user. The flaw is triggered by providing extreme inputs to the SQL functions levenshtein() or levenshtein_less_equal(). Versions prior to PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.