Threats tagged 'ghsa-x57w-5w86-j4vx'

An out-of-bounds read vulnerability exists in the TDS RPC procedure-name parser of the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4, and in Amazon Aurora PostgreSQL with Babelfish. This flaw may allow remote authenticated users to read adjacent process memory or cause a denial of service via a malformed TDS RPC request to the default TDS port 1433. Upgrades to fixed versions or restricting network access to the TDS port are recommended mitigations.