Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql18Upgrade postgresql16Upgrade postgresql15Upgrade postgresql17 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-private-develUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-staticUpgrade postgresql18-plpython3Upgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-testUpgrade postgresql18-llvmjitUpgrade postgresql18-upgradeUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-debugsourceUpgrade postgresql18-server-develUpgrade postgresql18Upgrade postgresql18-private-libsUpgrade postgresql18-pltclUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-contribUpgrade postgresql18-upgrade-develUpgrade postgresql18-server-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-server-devel-debuginfo | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql18-serverUpgrade postgresql14-serverUpgrade postgresql16-serverUpgrade postgresql15-serverUpgrade postgresql17-server | Aug 17, 2026 | Aug 16, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade postgresql18-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgis-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql18-contribUpgrade postgresql-pltclUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-libsUpgrade postgis-client-debuginfoUpgrade postgis-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgis-utilsUpgrade postgresql18-test-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql-server-develUpgrade postgresql18Upgrade postgresql-private-libs-debuginfoUpgrade postgresql-plperlUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-private-libsUpgrade pgvector-debugsourceUpgrade postgis-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql18-staticUpgrade postgresql18-serverUpgrade postgresql-contribUpgrade postgres-decoderbufs-debugsourceUpgrade postgisUpgrade pgvectorUpgrade postgresql-upgradeUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql18-plpython3Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-upgrade-develUpgrade pg_repackUpgrade postgresql-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-test-rpm-macrosUpgrade postgis-upgradeUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql18-docsUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-plperlUpgrade pg_repack-debugsourceUpgrade postgresql-private-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql18-testUpgrade postgis-clientUpgrade postgresql18-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-devel | Aug 31, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgis-debugsourceUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-staticUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-debugsourceUpgrade pgvector-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgis-utilsUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgis-upgradeUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-plperlUpgrade postgresql18-server-develUpgrade postgresql18-docs-debuginfoUpgrade postgresql-docs-debuginfoUpgrade pgvectorUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-contribUpgrade postgresql-upgrade-develUpgrade pgvector-debugsourceUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-private-libsUpgrade pg_repack-debugsourceUpgrade postgresql18-upgradeUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgis-clientUpgrade pgauditUpgrade postgresql18-private-develUpgrade postgresql-docsUpgrade postgresql18-private-libsUpgrade postgresql18-test-debuginfoUpgrade postgis-docsUpgrade postgresql18-serverUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade postgresql18-docsUpgrade postgresql18-testUpgrade postgisUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql18-upgrade-develUpgrade postgresql18-server-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgresql18Upgrade postgresql-private-develUpgrade postgresql18-plpython3 | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-18Upgrade postgresql-14 | Aug 20, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub