Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql17Upgrade postgresql16Upgrade postgresql18 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-pltclUpgrade postgresql18-private-libsUpgrade postgresql18-server-develUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18Upgrade postgresql18-upgradeUpgrade postgresql18-contribUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-docsUpgrade postgresql18-upgrade-develUpgrade postgresql18-server-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-test-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-private-develUpgrade postgresql18-plperlUpgrade postgresql18-llvmjitUpgrade postgresql18-staticUpgrade postgresql18-plpython3Upgrade postgresql18-testUpgrade postgresql18-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-upgrade-devel-debuginfo | Sep 1, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade postgresql18-serverUpgrade postgresql16-serverUpgrade postgresql14-serverUpgrade postgresql15-serverUpgrade postgresql17-server | Aug 17, 2026 | Aug 16, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 18.6 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql18-contrib-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgis-clientUpgrade postgresql18-plpython3Upgrade postgresql18-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade postgresqlUpgrade postgresql18-docsUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-serverUpgrade postgis-upgradeUpgrade postgresql-docsUpgrade postgresql18-testUpgrade postgresql-plpython3-debuginfoUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgresql18-plperlUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql-testUpgrade postgresql-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-private-develUpgrade postgresql-staticUpgrade postgres-decoderbufsUpgrade postgresql18-server-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-docs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgisUpgrade pgvector-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql18-staticUpgrade postgresql18-server-develUpgrade pgvector-debugsourceUpgrade postgis-utilsUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgresql18-contribUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgresql-contribUpgrade postgresql18-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgis-debugsourceUpgrade postgresql18-serverUpgrade pgvectorUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql-private-libsUpgrade postgis-docsUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgis-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql18-private-libsUpgrade postgresql18Upgrade postgresql-private-libs-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql18-debugsource | Aug 31, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql18-private-libsUpgrade postgresql18-test-debuginfoUpgrade postgisUpgrade postgresql18-private-develUpgrade postgresql-docsUpgrade pgvector-debugsourceUpgrade postgresql18-plperlUpgrade postgresql18-testUpgrade postgresql18-docsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-serverUpgrade postgresql-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-test-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade pgauditUpgrade postgis-clientUpgrade postgresql18-upgradeUpgrade pgaudit-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql-staticUpgrade postgresql18-server-devel-debuginfoUpgrade pg_repack-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-server-debuginfoUpgrade postgis-docsUpgrade postgresql18Upgrade postgresql18-contribUpgrade postgresql-upgrade-develUpgrade postgresql18-plpython3Upgrade postgresql-private-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-server-develUpgrade postgresql-plperl-debuginfoUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-staticUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgis-utilsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade pgvectorUpgrade postgis-debuginfoUpgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgis-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql18-debugsourceUpgrade postgresql18-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-private-libs-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql-contribUpgrade postgis-upgradeUpgrade postgis-client-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfo | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-16Upgrade postgresql-18Upgrade postgresql-14 | Aug 20, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub