Vulnerabilidades de AWS babelfish-for-postgresql (CVE)

Registros CVE publicados para AWS babelfish-for-postgresql, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
8.1Alta
CVE-2026-119924

Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

AWS babelfish-for-postgresql; Amazon Amazon Aurora PostgreSQL with Babelfish

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent …

9.8Crítica
CVE-2026-119923

Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

AWS babelfish-for-postgresql; Amazon Amazon Aurora PostgreSQL with Babelfish

A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS comman…

8.8Alta
CVE-2026-119922

Babelfish for PostgreSQL Privilege Escalation

AWS babelfish-for-postgresql; Amazon Amazon Aurora PostgreSQL with Babelfish

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish may allow remote authenticated users to elevate their privileges. To remediate this issue, …