Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade libpq-develUpgrade postgis-clientUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade pg_repackUpgrade libpqUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgis-docsUpgrade postgresql-private-libsUpgrade pgvectorUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgis-utilsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgisUpgrade postgis-upgradeUpgrade postgresql-contrib | Jan 20, 2026 | Jan 12, 2026 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql18Upgrade postgresql16Upgrade postgresql17 | Nov 17, 2025 | Nov 13, 2025 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-staticUpgrade libpq-debuginfoUpgrade postgresql-upgradeUpgrade postgresqlUpgrade libpqUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade libpq-develUpgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-docs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql17-contribUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql17-testUpgrade postgresql15-contrib-debuginfoUpgrade postgresql17-staticUpgrade libpq-debugsourceUpgrade postgresql15-testUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17Upgrade postgresql16Upgrade postgresql17-upgradeUpgrade postgresql16-llvmjit-debuginfoUpgrade libpq-debuginfoUpgrade postgresql17-docs-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-debuginfoUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql17-plperlUpgrade postgresql15-contribUpgrade postgresql15-plpython3Upgrade postgresql17-pltclUpgrade postgresql15-server-debuginfoUpgrade libpqUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql16-docs-debuginfoUpgrade postgresql16-plperlUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-pltclUpgrade postgresql16-private-libsUpgrade postgresql16-upgrade-debuginfoUpgrade libpq-develUpgrade postgresql17-server-debuginfoUpgrade postgresql16-testUpgrade postgresql16-upgradeUpgrade postgresql17-upgrade-develUpgrade postgresql15-debugsourceUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-serverUpgrade postgresql16-debugsourceUpgrade postgresql16-private-develUpgrade postgresql15-test-debuginfoUpgrade postgresql15-docsUpgrade postgresql16-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql16-llvmjitUpgrade postgresql16-test-debuginfoUpgrade postgresql16-plperl-debuginfoUpgrade postgresql17-contrib-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql17-private-libsUpgrade postgresql16-docsUpgrade postgresql15-upgradeUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade libpq-devel-debuginfoUpgrade postgresql17-serverUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql16-staticUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql15-private-develUpgrade postgresql17-private-develUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-docsUpgrade postgresql15-plperlUpgrade postgresql17-plperl-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql17-test-rpm-macrosUpgrade postgresql17-test-debuginfoUpgrade postgresql17-plpython3Upgrade postgresql17-debugsourceUpgrade postgresql16-server-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15Upgrade postgresql15-private-libsUpgrade postgresql16-serverUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql16-plpython3Upgrade postgresql17-server-develUpgrade postgresql15-server-develUpgrade postgresql16-pltclUpgrade postgresql15-upgrade-develUpgrade postgresql16-server-develUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql17-llvmjitUpgrade postgresql16-contrib-debuginfoUpgrade postgresql16-contribUpgrade postgresql15-staticUpgrade postgresql15-plperl-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql16-upgrade-develUpgrade postgresql16-test-rpm-macros | Dec 9, 2025 | Nov 13, 2025 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15Upgrade postgresql-17 | Dec 29, 2025 | Dec 29, 2025 |
| Freebsd | — | Upgrade postgresql15-clientUpgrade postgresql14-clientUpgrade postgresql17-clientUpgrade postgresql13-clientUpgrade postgresql18-clientUpgrade postgresql16-client | Dec 10, 2025 | Nov 14, 2025 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Oracle_linux | — | Upgrade pgvectorUpgrade postgresql-docsUpgrade libpq-develUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgis-clientUpgrade libpqUpgrade pg_repackUpgrade postgresql-contribUpgrade postgis-upgradeUpgrade postgis-utilsUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresqlUpgrade postgisUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgis-docs | Jan 15, 2026 | Nov 13, 2025 |
| Postgres | — | Upgrade to PostgreSQL version 18.1Upgrade to PostgreSQL version 15.15Upgrade to PostgreSQL version 17.7Upgrade to PostgreSQL version 14.20Upgrade to PostgreSQL version 16.11 | Nov 14, 2025 | Nov 13, 2025 |
| Redhat_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-upgrade-debuginfoNo solution existsUpgrade pgaudit-debugsourceUpgrade libpq-debuginfoUpgrade postgresql16-debuginfoUpgrade postgis-debugsourceUpgrade pgvectorUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade pgvector-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-private-develUpgrade postgis-docsUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade pg_repackUpgrade pg_repack-debuginfoUpgrade pgauditUpgrade postgresql-serverUpgrade pg_repack-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresqlUpgrade postgresql-private-libsUpgrade postgis-clientUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql16-debugsourceUpgrade libpq-debugsourceUpgrade postgresql-plperlUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgisUpgrade postgis-utilsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade libpqUpgrade libpq-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgis-upgrade-debuginfoUpgrade postgis-upgradeUpgrade postgresql-docsUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-debuginfoUpgrade libpq-devel-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-static | Dec 5, 2025 | Nov 13, 2025 |
| Rocky_linux | — | Upgrade postgis-upgradeUpgrade postgresql-upgrade-develUpgrade libpq-develUpgrade postgis-client-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-plpython3-debuginfoUpgrade pgvector-debugsourceUpgrade libpqUpgrade postgresql-staticUpgrade postgis-debuginfoUpgrade postgresql-contribUpgrade postgisUpgrade postgresql-upgradeUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docsUpgrade postgis-upgrade-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-docs-debuginfoUpgrade libpq-devel-debuginfoUpgrade postgis-debugsourceUpgrade postgresql-pltclUpgrade postgresql-upgrade-devel-debuginfoUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade postgis-utilsUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade postgresqlUpgrade postgis-clientUpgrade pg_repack-debuginfoUpgrade postgresql-plperlUpgrade postgresql-debugsourceUpgrade postgis-docsUpgrade pgvector-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-develUpgrade postgresql-private-libsUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade libpq-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade postgresql16-debuginfoUpgrade postgresql-server-develUpgrade postgresql16-debugsourceUpgrade pgvectorUpgrade pgauditUpgrade libpq-debuginfoUpgrade postgresql-upgrade-debuginfo | Jan 16, 2026 | Jan 15, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.5Upgrade Splunk Enterprise to version 10.2.2Upgrade Splunk Enterprise to version 9.4.10Upgrade Splunk Enterprise to version 9.3.11 | Jul 30, 2026 | Nov 13, 2025 |
| Ubuntu | — | Upgrade postgresql-17Upgrade postgresql-14Upgrade postgresql-16 | Dec 5, 2025 | Dec 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub