Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same via access to a PostgreSQL TCP socket. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade pgauditUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-pltcl | Oct 11, 2026 | Aug 10, 2026 |
| Alpine Linux | — | Upgrade postgresql17Upgrade postgresql15Upgrade postgresql16Upgrade postgresql18 | May 15, 2026 | May 14, 2026 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-llvmjit | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-upgrade-develUpgrade postgresql15-plperlUpgrade postgresql16-contribUpgrade postgresql17-serverUpgrade postgresql15-upgradeUpgrade postgresql16-server-debuginfoUpgrade postgresql16-contrib-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18-server-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql17-debugsourceUpgrade postgresql17-private-develUpgrade postgresql16-test-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-contribUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql15-staticUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql17-staticUpgrade postgresql18Upgrade postgresql17-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql15-docs-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql17-docsUpgrade postgresql16-upgrade-develUpgrade postgresql16-serverUpgrade postgresql16-debuginfoUpgrade postgresql17-contrib-debuginfoUpgrade postgresql15-private-develUpgrade postgresql15-debuginfoUpgrade postgresql17-upgradeUpgrade postgresql18-serverUpgrade postgresql15-llvmjitUpgrade postgresql15-private-libsUpgrade postgresql15-plperl-debuginfoUpgrade postgresql17-server-develUpgrade postgresql18-docsUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql16-server-develUpgrade postgresql17-plpython3Upgrade postgresql16-docsUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql17-testUpgrade postgresql16-plperl-debuginfoUpgrade postgresql17Upgrade postgresql17-test-rpm-macrosUpgrade postgresql16-test-rpm-macrosUpgrade postgresql15-server-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql16-plpython3Upgrade postgresql15Upgrade postgresql18-plperlUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql18-staticUpgrade postgresql15-contribUpgrade postgresql18-private-develUpgrade postgresql18-debuginfoUpgrade postgresql16Upgrade postgresql15-server-develUpgrade postgresql16-pltclUpgrade postgresql16-docs-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql17-pltclUpgrade postgresql15-testUpgrade postgresql17-upgrade-develUpgrade postgresql17-plperl-debuginfoUpgrade postgresql15-serverUpgrade postgresql16-llvmjitUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql16-plperlUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql18-server-develUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql16-debugsourceUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql17-test-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql17-docs-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql18-llvmjitUpgrade postgresql15-test-rpm-macrosUpgrade postgresql16-testUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-testUpgrade postgresql17-contribUpgrade postgresql17-plperlUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-llvmjitUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql15-pltclUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql17-private-libsUpgrade postgresql16-upgradeUpgrade postgresql16-staticUpgrade postgresql16-private-libsUpgrade postgresql16-private-develUpgrade postgresql18-plpython3Upgrade postgresql17-server-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-contrib-debuginfoUpgrade postgresql15-docsUpgrade postgresql18-docs-debuginfo | Jun 9, 2026 | May 14, 2026 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15Upgrade postgresql-17 | May 17, 2026 | May 17, 2026 |
| Freebsd | — | Upgrade postgresql17-clientUpgrade postgresql15-serverUpgrade postgresql16-serverUpgrade postgresql15-clientUpgrade postgresql17-serverUpgrade postgresql18-serverUpgrade postgresql14-serverUpgrade postgresql14-clientUpgrade postgresql16-clientUpgrade postgresql18-client | May 21, 2026 | May 14, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 17.10Upgrade to PostgreSQL version 18.4Upgrade to PostgreSQL version 14.23Upgrade to PostgreSQL version 16.14Upgrade to PostgreSQL version 15.18 | May 14, 2026 | May 14, 2026 |
| Redhat_linux | — | Upgrade postgresql18-server-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql18-staticUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-private-libsUpgrade postgresql18-test-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql18-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql18-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-testUpgrade postgresql18-plperlUpgrade postgresql-server-debuginfoUpgrade postgresql16-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgis-upgradeUpgrade postgresql18-private-develUpgrade postgis-docsUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-testUpgrade postgresql18-upgrade-develUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql-private-develUpgrade pg_repack-debuginfoUpgrade postgresql-debuginfoUpgrade pg_repackUpgrade postgresql18Upgrade postgresql18-docsUpgrade postgisUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgis-utilsUpgrade pgvector-debuginfoUpgrade pgaudit-debuginfoUpgrade pgauditUpgrade postgresql18-serverUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docsUpgrade postgis-debugsourceUpgrade pgvector-debugsourceUpgrade postgresql18-contrib-debuginfoUpgrade pgvectorUpgrade pg_repack-debugsourceUpgrade postgresql18-upgradeUpgrade postgresql18-contribUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgis-debuginfoNo solution existsUpgrade postgresql-staticUpgrade postgis-clientUpgrade postgresql-test-rpm-macrosUpgrade postgresql16-debuginfoUpgrade postgresql18-private-libsUpgrade postgis-client-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql18-server-debuginfo | Jul 17, 2026 | May 14, 2026 |
| Rocky_linux | — | Upgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade pg_repack-debuginfoUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-testUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pg_repack | Aug 20, 2026 | Aug 18, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.2.6 | Aug 20, 2026 | May 14, 2026 |
| Ubuntu | — | Upgrade postgresql-17Upgrade postgresql-18Upgrade postgresql-16Upgrade postgresql-14 | May 25, 2026 | May 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 19, 2026 | May 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub