Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgis-clientUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgis-upgradeUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgis-docsUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-test-rpm-macrosUpgrade postgis-utilsUpgrade postgresql-upgradeUpgrade postgisUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgresql-staticUpgrade pgvector | Mar 12, 2026 | Mar 4, 2026 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql18Upgrade postgresql17Upgrade postgresql15 | Feb 16, 2026 | Feb 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-plpython3Upgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-docs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql16-docs-debuginfoUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql16-debuginfoUpgrade postgresql17-upgrade-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql17-server-develUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql16-server-debuginfoUpgrade postgresql16-server-develUpgrade postgresql15-staticUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql16-test-debuginfoUpgrade postgresql16-upgrade-develUpgrade postgresql17-llvmjitUpgrade postgresql16-docsUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-upgrade-develUpgrade postgresql17-plperlUpgrade postgresql17Upgrade postgresql17-serverUpgrade postgresql17-debugsourceUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-contrib-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-test-debuginfoUpgrade postgresql16-plperl-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql17-plpython3Upgrade postgresql15-debugsourceUpgrade postgresql15-plperl-debuginfoUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql16-test-rpm-macrosUpgrade postgresql15Upgrade postgresql15-debuginfoUpgrade postgresql17-docsUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql17-private-develUpgrade postgresql17-test-rpm-macrosUpgrade postgresql16-private-libsUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-testUpgrade postgresql16-contrib-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-docsUpgrade postgresql17-server-debuginfoUpgrade postgresql17-docs-debuginfoUpgrade postgresql15-contribUpgrade postgresql17-upgradeUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql16-staticUpgrade postgresql16-contribUpgrade postgresql17-debuginfoUpgrade postgresql17-contribUpgrade postgresql16-private-develUpgrade postgresql16-llvmjitUpgrade postgresql17-private-libsUpgrade postgresql16-plpython3Upgrade postgresql16-llvmjit-debuginfoUpgrade postgresql17-plperl-debuginfoUpgrade postgresql16-serverUpgrade postgresql15-llvmjitUpgrade postgresql16-testUpgrade postgresql16-debugsourceUpgrade postgresql15-plpython3Upgrade postgresql15-contrib-debuginfoUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql16Upgrade postgresql15-test-rpm-macrosUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql16-plperlUpgrade postgresql17-test-debuginfoUpgrade postgresql17-pltclUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql17-staticUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql16-pltclUpgrade postgresql15-serverUpgrade postgresql17-testUpgrade postgresql16-upgrade | Mar 9, 2026 | Feb 12, 2026 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15Upgrade postgresql-17 | Feb 16, 2026 | Feb 16, 2026 |
| Freebsd | — | Upgrade postgresql15-serverUpgrade postgresql18-serverUpgrade postgresql17-serverUpgrade postgresql14-serverUpgrade postgresql16-server | Feb 13, 2026 | Feb 12, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Oracle_linux | — | Upgrade pg_repackUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgis-docsUpgrade postgresql-testUpgrade postgis-upgradeUpgrade postgresql-plperlUpgrade postgis-clientUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-private-develUpgrade postgis-utilsUpgrade postgresql-contribUpgrade pgvectorUpgrade postgresql-staticUpgrade pgauditUpgrade postgisUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-upgrade | Mar 10, 2026 | Feb 12, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 16.12Upgrade to PostgreSQL version 18.2Upgrade to PostgreSQL version 14.21Upgrade to PostgreSQL version 15.16Upgrade to PostgreSQL version 17.8 | Feb 13, 2026 | Feb 12, 2026 |
| Redhat_linux | — | Upgrade postgresql18-private-libsUpgrade postgresql18-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-docsUpgrade postgis-utilsUpgrade postgis-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql16-debugsourceUpgrade postgresql-upgrade-develUpgrade postgis-clientUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade pgvector-debugsourceUpgrade postgis-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade pgvectorUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql18-serverUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-staticUpgrade postgresql18-testUpgrade postgresql18-private-develUpgrade postgresql18-private-libs-debuginfoUpgrade postgis-upgradeUpgrade postgresql18-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-private-develUpgrade pg_repack-debugsourceUpgrade pg_repack-debuginfoNo solution existsUpgrade postgresql18-upgrade-develUpgrade postgresql-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18Upgrade postgresql-server-debuginfoUpgrade postgresql-testUpgrade postgresql16-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade pgauditUpgrade postgresql18-docsUpgrade postgres-decoderbufsUpgrade postgis-docsUpgrade postgresql-plpython3Upgrade postgresql18-plperl-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql-upgradeUpgrade postgresql18-plpython3Upgrade postgresql18-test-debuginfoUpgrade postgisUpgrade postgresql18-contrib | Mar 9, 2026 | Feb 12, 2026 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql18-server-develUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-staticUpgrade postgresql16-debugsourceUpgrade pg_repackUpgrade postgis-upgrade-debuginfoUpgrade postgis-utilsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-serverUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade pgvectorUpgrade postgis-client-debuginfoUpgrade postgresql-testUpgrade pg_repack-debuginfoUpgrade postgresql-pltclUpgrade postgresql18-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-plpython3Upgrade postgresql18-testUpgrade postgresql-plpython3-debuginfoUpgrade postgis-upgradeUpgrade postgresql-docs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresqlUpgrade postgresql-upgradeUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgis-clientUpgrade postgresql18-plperl-debuginfoUpgrade postgisUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-staticUpgrade pgvector-debugsourceUpgrade postgresql18-upgradeUpgrade postgresql16-debuginfoUpgrade postgresql18-server-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-serverUpgrade postgresql18Upgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgis-debugsourceUpgrade pgvector-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pgauditUpgrade postgresql18-contribUpgrade postgresql-upgrade-develUpgrade postgresql18-docsUpgrade postgis-docsUpgrade postgresql18-private-libsUpgrade postgresql18-plperlUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgis-debuginfoUpgrade postgresql18-plpython3-debuginfo | Mar 9, 2026 | Mar 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.12Upgrade Splunk Enterprise to version 10.2.4Upgrade Splunk Enterprise to version 10.4.0Upgrade Splunk Enterprise to version 9.3.13Upgrade Splunk Enterprise to version 10.0.7 | Jul 30, 2026 | Feb 12, 2026 |
| Suse | — | Upgrade postgresql17-serverUpgrade postgresql17-develUpgrade postgresql17-plpythonUpgrade postgresql18-serverUpgrade postgresql16-serverUpgrade postgresql15-contribUpgrade postgresql17Upgrade postgresql17-llvmjitUpgrade postgresql14-plpythonUpgrade postgresql16Upgrade postgresql17-docsUpgrade postgresql18-server-develUpgrade postgresql14-server-develUpgrade postgresql14-docsUpgrade postgresql15-serverUpgrade postgresql18-pltclUpgrade postgresql16-plperlUpgrade postgresql15-llvmjitUpgrade postgresql18-llvmjit-develUpgrade libpq5-32bitUpgrade postgresql16-docsUpgrade postgresql14-contribUpgrade postgresql14-develUpgrade postgresql18-plpythonUpgrade postgresql16-llvmjit-develUpgrade postgresql15-pltclUpgrade postgresql17-contribUpgrade libpq5Upgrade postgresql17-testUpgrade postgresql14-plperlUpgrade postgresql17-pltclUpgrade postgresql16-contribUpgrade postgresql18-contribUpgrade postgresql17-server-develUpgrade postgresql18-plperlUpgrade postgresql18-docsUpgrade postgresql18-develUpgrade postgresql16-server-develUpgrade postgresql15-docsUpgrade postgresql15-develUpgrade postgresql15-plpythonUpgrade postgresql18-devel-miniUpgrade postgresql16-plpythonUpgrade postgresql16-testUpgrade postgresql14-llvmjit-develUpgrade postgresql18-llvmjitUpgrade libecpg6-32bitUpgrade postgresql17-llvmjit-develUpgrade postgresql15Upgrade postgresql14-pltclUpgrade libecpg6Upgrade postgresql16-develUpgrade postgresql15-plperlUpgrade postgresql14-testUpgrade postgresql14-serverUpgrade postgresql14Upgrade postgresql15-server-develUpgrade postgresql17-plperlUpgrade postgresql16-llvmjitUpgrade postgresql14-llvmjitUpgrade postgresql15-testUpgrade postgresql16-pltclUpgrade postgresql15-llvmjit-develUpgrade postgresql18-testUpgrade postgresql18 | Feb 23, 2026 | Feb 20, 2026 |
| Ubuntu | — | Upgrade postgresql-client-17Upgrade postgresql-14Upgrade postgresql-client-14Upgrade postgresql-16Upgrade postgresql-17Upgrade postgresql-client-16 | Mar 9, 2026 | Mar 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub