Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-private-develUpgrade postgresql-serverUpgrade postgresql-testUpgrade pgauditUpgrade postgisUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-upgradeUpgrade postgis-upgradeUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-staticUpgrade postgis-docsUpgrade pgvectorUpgrade postgresql-upgrade-develUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgis-clientUpgrade postgis-utilsUpgrade postgresql-docsUpgrade postgresql-test-rpm-macros | Mar 12, 2026 | Mar 9, 2026 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql17Upgrade postgresql18Upgrade postgresql16 | Feb 16, 2026 | Feb 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-docs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql15-plperl-debuginfoUpgrade postgresql16-testUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql17-plperlUpgrade postgresql17-testUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql16-private-libsUpgrade postgresql16-staticUpgrade postgresql17Upgrade postgresql17-upgradeUpgrade postgresql17-debugsourceUpgrade postgresql17-test-debuginfoUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql16-private-develUpgrade postgresql15-test-rpm-macrosUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-pltclUpgrade postgresql17-server-debuginfoUpgrade postgresql16-llvmjitUpgrade postgresql17-llvmjitUpgrade postgresql17-contribUpgrade postgresql17-server-develUpgrade postgresql15-pltclUpgrade postgresql17-plperl-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql16Upgrade postgresql17-upgrade-develUpgrade postgresql15Upgrade postgresql15-contribUpgrade postgresql17-test-rpm-macrosUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-testUpgrade postgresql17-plpython3Upgrade postgresql16-docs-debuginfoUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql15-plperlUpgrade postgresql17-debuginfoUpgrade postgresql16-contrib-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-debuginfoUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql16-plperlUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-upgradeUpgrade postgresql16-server-debuginfoUpgrade postgresql16-test-rpm-macrosUpgrade postgresql17-staticUpgrade postgresql17-docs-debuginfoUpgrade postgresql16-server-develUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql15-serverUpgrade postgresql16-contribUpgrade postgresql16-plperl-debuginfoUpgrade postgresql16-docsUpgrade postgresql16-debugsourceUpgrade postgresql15-docs-debuginfoUpgrade postgresql17-docsUpgrade postgresql16-pltclUpgrade postgresql17-private-develUpgrade postgresql16-debuginfoUpgrade postgresql16-upgrade-develUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql16-upgradeUpgrade postgresql16-serverUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-upgrade-develUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql17-serverUpgrade postgresql17-private-libsUpgrade postgresql17-contrib-debuginfoUpgrade postgresql16-test-debuginfoUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-private-develUpgrade postgresql15-debugsourceUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-staticUpgrade postgresql16-plpython3 | Mar 9, 2026 | Feb 12, 2026 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-17Upgrade postgresql-15 | Feb 16, 2026 | Feb 16, 2026 |
| Freebsd | — | Upgrade postgresql15-serverUpgrade postgresql14-serverUpgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql17-server | Feb 13, 2026 | Feb 12, 2026 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgis-upgradeUpgrade postgresql-plpython3Upgrade postgis-docsUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresqlUpgrade postgis-clientUpgrade postgresql-test-rpm-macrosUpgrade pgauditUpgrade pg_repackUpgrade postgres-decoderbufsUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgis-utilsUpgrade postgresql-upgrade-develUpgrade postgisUpgrade pgvector | Mar 12, 2026 | Feb 12, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 14.21Upgrade to PostgreSQL version 18.2Upgrade to PostgreSQL version 16.12Upgrade to PostgreSQL version 17.8Upgrade to PostgreSQL version 15.16 | Feb 13, 2026 | Feb 12, 2026 |
| Redhat_linux | — | Upgrade postgis-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgisUpgrade postgresql-server-devel-debuginfoUpgrade postgresql16-debuginfoUpgrade postgresql-contribUpgrade postgis-client-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgradeUpgrade postgresql-plpython3Upgrade postgresql16-debugsourceUpgrade postgresql18-staticUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade pgvector-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgis-utilsUpgrade postgresql18-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql-pltclUpgrade pgaudit-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18Upgrade pg_repack-debuginfoUpgrade pgvectorUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgis-debugsourceUpgrade postgresql-plperlUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgis-docsUpgrade postgresql-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql18-serverUpgrade postgresql18-server-develUpgrade postgresql-private-libsUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade pgauditUpgrade postgis-upgradeUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-serverUpgrade postgresql18-upgradeUpgrade postgresql18-server-devel-debuginfoUpgrade pg_repackUpgrade postgresql18-testUpgrade pg_repack-debugsourceUpgrade postgresql18-upgrade-develUpgrade postgresql18-plpython3Upgrade postgresqlUpgrade postgresql18-private-develUpgrade postgresql18-debuginfoUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoNo solution existsUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql18-server-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql18-docsUpgrade postgresql-test-debuginfoUpgrade postgresql-private-develUpgrade postgis-clientUpgrade postgresql18-plperlUpgrade postgresql-docs | Mar 9, 2026 | Feb 12, 2026 |
| Rocky_linux | — | Upgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-contribUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-testUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-server-develUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgis-clientUpgrade postgresql-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql16-debuginfoUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-private-develUpgrade pgaudit-debugsourceUpgrade pgvectorUpgrade postgresql18-contrib-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql-staticUpgrade postgresql-debugsourceUpgrade pgvector-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql18-staticUpgrade postgresql18-plpython3Upgrade postgresql-docsUpgrade postgresql-private-libsUpgrade postgresql18-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-test-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgis-utilsUpgrade postgresql-upgrade-develUpgrade postgresql18-private-develUpgrade pgvector-debugsourceUpgrade postgres-decoderbufsUpgrade postgis-debugsourceUpgrade postgresql-docs-debuginfoUpgrade postgresql18-docsUpgrade postgresql18-private-libs-debuginfoUpgrade postgisUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3Upgrade postgresql18Upgrade postgresql16-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgis-docsUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql18-plperlUpgrade postgresql-server-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgis-upgradeUpgrade postgresql18-serverUpgrade pgaudit-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgis-debuginfo | Mar 9, 2026 | Mar 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.0Upgrade Splunk Enterprise to version 10.0.7Upgrade Splunk Enterprise to version 10.2.4Upgrade Splunk Enterprise to version 9.3.13Upgrade Splunk Enterprise to version 9.4.12 | Jul 30, 2026 | Feb 12, 2026 |
| Suse | — | Upgrade postgresql15-testUpgrade postgresql16-serverUpgrade postgresql15-pltclUpgrade postgresql17-docsUpgrade postgresql18-pltclUpgrade postgresql17-llvmjit-develUpgrade postgresql15-contribUpgrade postgresql15-docsUpgrade postgresql18-server-develUpgrade postgresql16-pltclUpgrade postgresql14-testUpgrade postgresql16-contribUpgrade postgresql18-contribUpgrade postgresql18-serverUpgrade postgresql15-plperlUpgrade postgresql14-docsUpgrade postgresql18Upgrade postgresql14-pltclUpgrade postgresql15-develUpgrade postgresql16-server-develUpgrade postgresql15-server-develUpgrade postgresql14-llvmjit-develUpgrade libecpg6Upgrade postgresql17-testUpgrade postgresql17-plpythonUpgrade postgresql14-server-develUpgrade postgresql16-develUpgrade postgresql15-serverUpgrade postgresql18-llvmjit-develUpgrade postgresql18-docsUpgrade postgresql18-devel-miniUpgrade postgresql17-develUpgrade postgresql14-serverUpgrade postgresql16Upgrade postgresql17-plperlUpgrade postgresql15-plpythonUpgrade postgresql15Upgrade libpq5-32bitUpgrade postgresql18-develUpgrade postgresql17-serverUpgrade postgresql17Upgrade postgresql16-llvmjitUpgrade postgresql14-develUpgrade postgresql17-pltclUpgrade postgresql14-plpythonUpgrade postgresql17-server-develUpgrade postgresql17-llvmjitUpgrade postgresql18-plpythonUpgrade postgresql16-docsUpgrade postgresql15-llvmjitUpgrade postgresql16-plperlUpgrade postgresql16-testUpgrade postgresql18-llvmjitUpgrade postgresql16-plpythonUpgrade postgresql16-llvmjit-develUpgrade libpq5Upgrade postgresql15-llvmjit-develUpgrade postgresql14-llvmjitUpgrade postgresql18-testUpgrade postgresql17-contribUpgrade postgresql14-contribUpgrade postgresql14Upgrade libecpg6-32bitUpgrade postgresql14-plperlUpgrade postgresql18-plperl | Feb 23, 2026 | Feb 20, 2026 |
| Ubuntu | — | Upgrade postgresql-client-16Upgrade postgresql-14Upgrade postgresql-16Upgrade postgresql-client-14Upgrade postgresql-client-17Upgrade postgresql-17 | Mar 9, 2026 | Mar 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub