Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-private-develUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgis-docsUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgis-upgradeUpgrade postgresql-private-libsUpgrade postgisUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgis-clientUpgrade postgis-utilsUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-upgrade-develUpgrade pg_repackUpgrade pgvector | Mar 12, 2026 | Mar 9, 2026 |
| Alpine Linux | — | Upgrade postgresql17Upgrade postgresql15Upgrade postgresql18Upgrade postgresql16 | Feb 16, 2026 | Feb 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-upgrade-develUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-llvmjitUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-plpython3 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql16-private-develUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-test-debuginfoUpgrade postgresql16-staticUpgrade postgresql16-testUpgrade postgresql17-plperlUpgrade postgresql17-testUpgrade postgresql17-contribUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql17-plpython3Upgrade postgresql15-test-rpm-macrosUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql17Upgrade postgresql17-server-debuginfoUpgrade postgresql17-server-develUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-upgrade-develUpgrade postgresql17-llvmjitUpgrade postgresql15-testUpgrade postgresql17-debugsourceUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql17-plperl-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-pltclUpgrade postgresql16Upgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql16-llvmjitUpgrade postgresql17-pltclUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-contribUpgrade postgresql16-private-libsUpgrade postgresql17-test-rpm-macrosUpgrade postgresql16-docs-debuginfoUpgrade postgresql17-upgradeUpgrade postgresql15Upgrade postgresql16-docsUpgrade postgresql15-docs-debuginfoUpgrade postgresql16-plperl-debuginfoUpgrade postgresql17-docsUpgrade postgresql16-server-debuginfoUpgrade postgresql16-pltclUpgrade postgresql15-staticUpgrade postgresql16-plpython3Upgrade postgresql15-plperlUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql17-private-libs-debuginfoUpgrade postgresql16-upgrade-develUpgrade postgresql16-upgradeUpgrade postgresql16-test-rpm-macrosUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql17-private-develUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql16-plperlUpgrade postgresql15-server-debuginfoUpgrade postgresql16-contribUpgrade postgresql16-serverUpgrade postgresql16-debuginfoUpgrade postgresql15-docsUpgrade postgresql17-debuginfoUpgrade postgresql16-contrib-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql17-staticUpgrade postgresql17-docs-debuginfoUpgrade postgresql16-server-develUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql15-serverUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql17-serverUpgrade postgresql17-private-libsUpgrade postgresql17-contrib-debuginfoUpgrade postgresql16-test-debuginfoUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-server-develUpgrade postgresql15-private-develUpgrade postgresql15-debugsourceUpgrade postgresql16-debugsourceUpgrade postgresql15-upgrade | Mar 9, 2026 | Feb 12, 2026 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-17Upgrade postgresql-13 | Feb 16, 2026 | Feb 16, 2026 |
| Freebsd | — | Upgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql17-serverUpgrade postgresql14-serverUpgrade postgresql15-server | Feb 13, 2026 | Feb 12, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Oracle_linux | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgis-upgradeUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade postgis-docsUpgrade postgresql-plperlUpgrade postgis-utilsUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-pltclUpgrade postgis-clientUpgrade postgresql-upgradeUpgrade pg_repackUpgrade pgauditUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade pgvectorUpgrade postgis | Mar 12, 2026 | Feb 12, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 15.16Upgrade to PostgreSQL version 14.21Upgrade to PostgreSQL version 18.2Upgrade to PostgreSQL version 16.12Upgrade to PostgreSQL version 17.8 | Feb 13, 2026 | Feb 12, 2026 |
| Redhat_linux | — | Upgrade postgis-debugsourceUpgrade postgresql-server-develUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgis-docsUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgisUpgrade postgresql18-test-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-debugsourceUpgrade postgis-debuginfoUpgrade postgresql18-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgis-utilsUpgrade pgvector-debuginfoUpgrade pgvectorUpgrade postgresql-contribUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18Upgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql-private-libs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql16-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql18-contribUpgrade pgvector-debugsourceUpgrade postgresql18-private-libsUpgrade postgresql16-debugsourceUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-devel-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql18-serverUpgrade postgresql18-server-develUpgrade postgresql-private-libsUpgrade postgresql18-plpython3Upgrade postgresql18-debuginfoUpgrade postgresql18-testUpgrade postgresql18-private-develUpgrade postgis-clientUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-testUpgrade postgresql-plpython3-debuginfoNo solution existsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql-test-debuginfoUpgrade postgis-upgradeUpgrade postgresql18-upgradeUpgrade postgresql18-server-debuginfoUpgrade postgresql-serverUpgrade postgresql-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-plperlUpgrade postgresql-docsUpgrade postgresql18-server-devel-debuginfoUpgrade pgauditUpgrade pg_repackUpgrade pg_repack-debugsourceUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql18-upgrade-develUpgrade postgresql18-docsUpgrade postgresql-private-devel | Mar 9, 2026 | Feb 12, 2026 |
| Rocky_linux | — | Upgrade postgresql-plpython3-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade pgvector-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-serverUpgrade postgisUpgrade postgresql18-docsUpgrade postgis-utilsUpgrade postgresql-plpython3Upgrade postgresql-test-debuginfoUpgrade postgresql18-debuginfoUpgrade postgis-upgradeUpgrade postgresql16-debugsourceUpgrade postgis-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql18Upgrade postgresql18-plperl-debuginfoUpgrade postgresql18-private-develUpgrade postgresql-upgradeUpgrade postgresql-private-libs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-contribUpgrade postgresql18-upgrade-develUpgrade postgis-debugsourceUpgrade postgresql18-test-debuginfoUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgis-docsUpgrade postgresql18-plperlUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-testUpgrade pg_repackUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-private-libsUpgrade postgis-upgrade-debuginfoUpgrade pgvectorUpgrade postgresql18-server-develUpgrade postgresql18-plpython3Upgrade postgresql18-debugsourceUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade postgresql18-server-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-serverUpgrade postgis-client-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-contribUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql18-testUpgrade postgresql-plperlUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgis-clientUpgrade postgresql18-docs-debuginfoUpgrade postgresql-docsUpgrade postgresql18-private-libsUpgrade postgresql16-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql18-static | Mar 9, 2026 | Mar 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.0Upgrade Splunk Enterprise to version 10.2.4Upgrade Splunk Enterprise to version 10.0.7Upgrade Splunk Enterprise to version 9.3.13Upgrade Splunk Enterprise to version 9.4.12 | Jul 30, 2026 | Feb 12, 2026 |
| Suse | — | Upgrade postgresql14Upgrade postgresql17-plperlUpgrade postgresql18-docsUpgrade postgresql18-devel-miniUpgrade postgresql18-plperlUpgrade postgresql14-serverUpgrade postgresql17-develUpgrade postgresql14-plperlUpgrade libecpg6-32bitUpgrade postgresql14-contribUpgrade postgresql15-plpythonUpgrade postgresql16Upgrade postgresql18-develUpgrade libpq5-32bitUpgrade postgresql15Upgrade postgresql17-contribUpgrade postgresql14-llvmjitUpgrade postgresql16-llvmjitUpgrade postgresql18-plpythonUpgrade postgresql17Upgrade postgresql17-serverUpgrade postgresql18-testUpgrade postgresql16-plpythonUpgrade postgresql18-llvmjitUpgrade postgresql16-llvmjit-develUpgrade libpq5Upgrade postgresql15-llvmjitUpgrade postgresql14-plpythonUpgrade postgresql15-llvmjit-develUpgrade postgresql14-develUpgrade postgresql16-docsUpgrade postgresql16-testUpgrade postgresql16-plperlUpgrade postgresql17-pltclUpgrade postgresql17-llvmjitUpgrade postgresql17-server-develUpgrade postgresql18-server-develUpgrade postgresql15-contribUpgrade postgresql18-contribUpgrade postgresql16-pltclUpgrade postgresql16-contribUpgrade postgresql15-docsUpgrade postgresql16-serverUpgrade postgresql14-llvmjit-develUpgrade postgresql17-testUpgrade postgresql15-testUpgrade postgresql15-pltclUpgrade postgresql17-llvmjit-develUpgrade postgresql15-develUpgrade postgresql18-llvmjit-develUpgrade postgresql17-docsUpgrade postgresql16-develUpgrade postgresql14-pltclUpgrade postgresql18-pltclUpgrade postgresql15-server-develUpgrade postgresql16-server-develUpgrade postgresql15-serverUpgrade postgresql14-server-develUpgrade libecpg6Upgrade postgresql17-plpythonUpgrade postgresql14-docsUpgrade postgresql18-serverUpgrade postgresql18Upgrade postgresql15-plperlUpgrade postgresql14-test | Feb 23, 2026 | Feb 20, 2026 |
| Ubuntu | — | Upgrade postgresql-client-17Upgrade postgresql-17Upgrade postgresql-14Upgrade postgresql-client-16Upgrade postgresql-16Upgrade postgresql-client-14 | Mar 9, 2026 | Mar 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub