7.5Yüksek
Denial of service in github.com/jackc/pgproto3/v2
github.com/jackc/pgproto3/v2 github.com/jackc/pgproto3/v2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Multicluster Global Hub 1.3.4
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.