DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
PostgreSQL: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-08-13
Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Programmcode auszuführen, SQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.
01
beschreibt (28)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-6471US | —OT erhöht | Exploit | ||
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the ser… | ||||
| CVE-2026-6470US | —OT erhöht | — | ||
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. M… | ||||
| CVE-2026-6469US | — | — | ||
Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table… | ||||
| CVE-2026-6464US | — | — | ||
Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN"… | ||||
| CVE-2026-19385US | — | — | ||
Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a c… | ||||
| CVE-2026-18408US | — | — | ||
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating syst… | ||||
| CVE-2026-18024US | — | — | ||
Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same clas… | ||||
| CVE-2026-16241US | — | — | ||
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the man… | ||||
| CVE-2026-16239US | — | — | ||
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or oth… | ||||
| CVE-2026-16238US | — | — | ||
Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of ra… | ||||
| CVE-2026-15742US | — | — | ||
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the databa… | ||||
| CVE-2026-15741US | — | — | ||
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse con… | ||||
| CVE-2026-14681US | — | — | ||
Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite… | ||||
| CVE-2026-14680US | — | — | ||
Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions wi… | ||||
| CVE-2026-14679US | — | — | ||
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes… | ||||
| CVE-2026-14678US | — | — | ||
Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy… | ||||
| CVE-2026-14677US | — | — | ||
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted funct… | ||||
| CVE-2026-14676US | — | — | ||
Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries conta… | ||||
| CVE-2026-14673US | — | — | ||
Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on… | ||||
| CVE-2026-14672US | — | — | ||
Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This req… | ||||
20 von 28 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2026-70186 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:67280 vom 2026-09-14external
- Red Hat Security Advisory RHSA-2026:67491 vom 2026-09-15external
- Red Hat Security Advisory RHSA-2026:67848 vom 2026-09-16external
- Red Hat Security Advisory RHSA-2026:69607 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:69698 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:69876 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:69914 vom 2026-09-22external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan