Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade libpqUpgrade postgis-docsUpgrade postgisUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgis-utilsUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade pgvectorUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgis-clientUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgis-upgradeUpgrade libpq-devel | Jun 17, 2026 | Jun 16, 2026 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql17Upgrade postgresql15Upgrade postgresql18 | May 15, 2026 | May 14, 2026 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpython3Upgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade libpq-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgradeUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade libpqUpgrade postgresql-testUpgrade postgresql-pltclUpgrade libpq-debuginfoUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-server-devel | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18Upgrade postgresql18-debugsourceUpgrade postgresql17-serverUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql16Upgrade postgresql16-debugsourceUpgrade postgresql17-upgrade-debuginfoUpgrade kernel-livepatch-6.18.16-18.222Upgrade postgresql16-upgradeUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-private-develUpgrade kernel6.18-tools-debuginfoUpgrade postgresql17-private-libsUpgrade postgresql18-server-develUpgrade postgresql15-serverUpgrade bpftool6.18Upgrade postgresql15-llvmjitUpgrade postgresql15-upgradeUpgrade postgresql16-pltclUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql17-server-develUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql17-plperl-debuginfoUpgrade postgresql18-testUpgrade postgresql15-server-develUpgrade postgresql16-pltcl-debuginfoUpgrade bpftool6.18-debuginfoUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql17-staticUpgrade postgresql17-test-debuginfoUpgrade postgresql16-testUpgrade postgresql17-upgrade-devel-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade postgresql16-staticUpgrade postgresql17-pltcl-debuginfoUpgrade python3-perf6.18Upgrade postgresql15-docsUpgrade postgresql18-test-rpm-macrosUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-libbpf-develUpgrade kernel6.18-libbpf-staticUpgrade postgresql16-contribUpgrade postgresql16-private-libsUpgrade postgresql17-test-rpm-macrosUpgrade postgresql18-upgrade-devel-debuginfoUpgrade perf6.18-debuginfoUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql17-pltclUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql16-plperl-debuginfoUpgrade postgresql16-test-rpm-macrosUpgrade postgresql15-test-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql16-plpython3Upgrade postgresql17-contribUpgrade postgresql18-serverUpgrade postgresql18-test-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql16-server-develUpgrade postgresql16-llvmjitUpgrade postgresql16-serverUpgrade postgresql15-plpython3Upgrade postgresql17-contrib-debuginfoUpgrade perf6.18Upgrade postgresql17-upgrade-develUpgrade kernel6.18-tools-develUpgrade postgresql18-private-libsUpgrade postgresql17-testUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql16-private-develUpgrade postgresql16-plperlUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-staticUpgrade kernel6.18-debuginfo-common-x86_64Upgrade postgresql17Upgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql17-plpython3Upgrade postgresql18-upgradeUpgrade postgresql15-testUpgrade postgresql15-contrib-debuginfoUpgrade postgresql16-test-debuginfoUpgrade postgresql16-docsUpgrade postgresql18-docsUpgrade postgresql18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade postgresql18-server-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql17-server-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql16-contrib-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-contribUpgrade kernel6.18-headersUpgrade postgresql17-debugsourceUpgrade kernel6.18-debuginfoUpgrade postgresql17-docs-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql17-llvmjitUpgrade postgresql15-pltclUpgrade postgresql17-upgradeUpgrade postgresql18-pltclUpgrade postgresql15-llvmjit-debuginfoUpgrade kernel6.18-toolsUpgrade postgresql16-upgrade-develUpgrade postgresql16-server-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15Upgrade postgresql17-docsUpgrade postgresql16-docs-debuginfoUpgrade postgresql16-debuginfoUpgrade kernel6.18-modules-extraUpgrade postgresql18-staticUpgrade postgresql17-private-develUpgrade postgresql18-llvmjitUpgrade postgresql18-plpython3Upgrade postgresql18-plperlUpgrade postgresql17-plperlUpgrade postgresql15-pltcl-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-libbpfUpgrade kernel6.18Upgrade postgresql17-llvmjit-debuginfoUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql18-contrib | May 28, 2026 | May 14, 2026 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13Upgrade postgresql-17 | May 17, 2026 | May 17, 2026 |
| Freebsd | — | Upgrade postgresql18-clientUpgrade postgresql18-serverUpgrade postgresql14-clientUpgrade postgresql17-clientUpgrade postgresql16-serverUpgrade postgresql15-serverUpgrade postgresql17-serverUpgrade postgresql16-clientUpgrade postgresql14-serverUpgrade postgresql15-client | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 15.18Upgrade to PostgreSQL version 17.10Upgrade to PostgreSQL version 16.14Upgrade to PostgreSQL version 18.4Upgrade to PostgreSQL version 14.23 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade postgresql-plpython3-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18Upgrade postgis-debugsourceUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgis-upgrade-debuginfoUpgrade postgresql-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql-plpython3Upgrade postgresql18-test-debuginfoUpgrade postgresql18-docsUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade pg_repack-debugsourceUpgrade postgisUpgrade postgres-decoderbufsUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-upgrade-develNo solution existsUpgrade postgresql18-serverUpgrade libpq-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql18-plperlUpgrade postgresql-contribUpgrade libpq-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgis-utilsUpgrade libpqUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgis-upgradeUpgrade postgresql-serverUpgrade pgvector-debuginfoUpgrade pg_repackUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql-testUpgrade libpq-develUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-contribUpgrade postgresql16-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-docsUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-test-debuginfoUpgrade pgvectorUpgrade postgresql-server-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade pgaudit-debugsourceUpgrade postgresql18-staticUpgrade postgresql18-testUpgrade postgresql-staticUpgrade postgresql18-server-develUpgrade postgresql18-private-libsUpgrade postgresql-debugsourceUpgrade postgis-docsUpgrade postgresql18-plpython3Upgrade postgresql18-contrib-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-private-develUpgrade libpq-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresqlUpgrade postgis-clientUpgrade postgresql-pltclUpgrade pgaudit-debuginfoUpgrade postgresql16-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-debuginfoUpgrade postgresql-libs | Jun 18, 2026 | May 14, 2026 |
| Rocky_linux | — | Upgrade pgaudit-debugsourceUpgrade postgresql-docsUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-staticUpgrade pgvector-debuginfoUpgrade pg_repack-debuginfoUpgrade postgis-client-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-libsUpgrade pgvector-debugsourceUpgrade libpq-debugsourceUpgrade postgis-docsUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-private-develUpgrade postgis-debugsourceUpgrade postgresql-debuginfoUpgrade postgis-clientUpgrade postgres-decoderbufsUpgrade postgis-utilsUpgrade postgresql-contribUpgrade pg_repack-debugsourceUpgrade pgaudit-debuginfoUpgrade libpq-develUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgis-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade libpq-debuginfoUpgrade pgvectorUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade libpq-devel-debuginfoUpgrade libpqUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgisUpgrade postgis-upgradeUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-contrib-debuginfo | Jun 18, 2026 | Jun 17, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 9.4.14 | Aug 20, 2026 | May 14, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-14Upgrade postgresql-17Upgrade postgresql-18 | May 25, 2026 | May 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 19, 2026 | May 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub