IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.5Hoch

CVE-2026-32286Denial of service in github.com/jackc/pgproto3/v2

github.com/jackc/pgproto3/v2 github.com/jackc/pgproto3/v2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Multicluster Global… Veröffentlicht: (vor 7 Monaten)

Beschreibung

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.

Schwachstellentyp (CWE): CWE-125CWE-1285CWE-129

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
advanced cluster security 4.8 —
github.com/jackc/pgproto3/v2 github.com/jackc/pgproto3/v2 all versions
jackc pgproto3 2.0.0 – ≤ 2.3.3
multicluster globalhub 1.3 —
multicluster globalhub 1.4 —
multicluster globalhub 1.5 —
multicluster globalhub 1.6 —
quay 3.10 —
quay 3.12 —
quay 3.14 —
quay 3.15 —
quay 3.16 —
quay 3.17 —
quay 3.9 —
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 all versions
Red Hat Multicluster Engine for Kubernetes all versions
Red Hat Multicluster Global Hub —
Red Hat Multicluster Global Hub 1.3.4 all versions
Red Hat Multicluster Global Hub 1.4.5 all versions
Red Hat Multicluster Global Hub 1.6.5 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 all versions
Red Hat Red Hat Advanced Cluster Security 4 —
Red Hat Red Hat Advanced Cluster Security 4.8 all versions
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Hardened Images —
Red Hat Red Hat multicluster global hub 1.5.3 all versions
Red Hat Red Hat OpenShift AI (RHOAI) all versions
Red Hat Red Hat OpenShift Cluster Manager CLI all versions
Red Hat Red Hat OpenShift Container Platform 4 —
Red Hat Red Hat OpenShift on AWS all versions
Red Hat Red Hat Quay 3 all versions
Red Hat Red Hat Quay 3.10 all versions
Red Hat Red Hat Quay 3.12 all versions
Red Hat Red Hat Quay 3.14 all versions
Red Hat Red Hat Quay 3.15 all versions
Red Hat Red Hat Quay 3.16 all versions
Red Hat Red Hat Quay 3.17 all versions
Red Hat Red Hat Quay 3.9 all versions
Red Hat Red Hat Trusted Artifact Signer —

Referenzen und Patches

CPE-Treffer (NVD) (1)
  • cpe:2.3:a:jackc:pgproto3:*:*:*:*:*:go:*:* ≥ 2.0.0 ≤ 2.3.3

Neue CVEs im selben Produkt — Red Hat Enterprise Linux

5.5Mittel
CVE-2026-127101

Sssd: sssd: null pointer dereference in pam responder when protocol version negotiation is skipped

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in SSSD's PAM responder. A local attacker can send an authentication request without first negotiating the client protocol version. The responder dereferences a NULL protocol-version pointer and crashes, disrupting SSSD-backed authentication.…

5.5Mittel
CVE-2026-127100

Sssd: sssd: local denial of service through unchecked oauth2 json code type in pam responder

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in SSSD's PAM responder on builds with the JSON PAM extension enabled. A local attacker can submit a crafted authentication request containing a non-string OAuth2 code value. Missing JSON type validation leads to a NULL pointer dereference, t…

5.9Mittel
CVE-2026-127099

Sssd: sssd: stack buffer overflow during rsa certificate-to-ssh key conversion

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in SSSD's conversion of X.509 certificate RSA public keys to SSH keys. Missing size checks before copying RSA components into fixed-size stack buffers can cause a stack buffer overflow. An attacker able to supply a certificate with oversized …

5.5Mittel
CVE-2026-126831

Cpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnames

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in cpio. A local user can cause a Denial of Service (DoS) by triggering a stack-based buffer overflow when creating archives in tar or ustar formats. When archiving files owned by users or groups with names exceeding 32 characters, cpio copie…

7.9Hoch
CVE-2026-121876

Sandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers (confidential peer pods). systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by ty…