IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.2Yüksek

CVE-2026-6471PostgreSQL logical decoding can dlopen arbitrary file

PostgreSQL Yayım: (3 ay önce)

Açıklama

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Zayıflık türü (CWE): CWE-862

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
postgresql postgresql 14.0 – < 14.24
— PostgreSQL 18 – < 18.6, 17 – < 17.11, 16 – < 16.15, 15 – < 15.19, < 14.24

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (5)
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* ≥ 14.0 < 14.24
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* ≥ 15.0 < 15.19
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* ≥ 16.0 < 16.15
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* ≥ 17.0 < 17.11
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* ≥ 18.0 < 18.5

Aynı üründe son açıklar — PostgreSQL

4.3Orta
CVE-2026-6470

PostgreSQL fails to check type USAGE privilege

PostgreSQL

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and r…

4.3Orta
CVE-2026-18024

PostgreSQL ascii() function reads past end of buffer

PostgreSQL

Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Ve…