Threats tagged 'ghsa-v5vg-62mg-4ccv'

A heap buffer overflow vulnerability exists in the PostgreSQL to_char function when formatting timestamptz values. This flaw allows an attacker who can control the timezone parameter to execute arbitrary code with the privileges of the database operating system user by supplying a long POSIX timezone abbreviation. Versions prior to PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.