Skip to content
fr Sign in
8.8 High

CVE-2026-2006 Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…

Description

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Affected products and versions

Product Affected versions Fixed in
postgresql 18 18 → < 18.2 18.2
postgresql 17 17 → < 17.8 17.8
postgresql 16 16 → < 16.12 16.12
postgresql 15 15 → < 15.16 15.16
postgresql 14.21 earliest → < 14.21 14.21
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 8) Versions not published
Red Hat Enterprise Linux AppStream AUS (v. 8.2) Versions not published
Show the 37 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux AppStream AUS (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.0) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.2) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) Versions not published
Red Hat CodeReady Linux Builder EUS (v.9.4) Versions not published
Red Hat CodeReady Linux Builder EUS (v.9.6) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) Versions not published
Red Hat Hardened Images 18.3 earliest → < 18.3-1.2.hum1 18.3-1.2.hum1
Red Hat Update Infrastructure 5 1773670137 earliest → < 1773670137 1773670137
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 8 8100020260302082007.489197 earliest → < 8100020260302082007.489197e6 8100020260302082007.489197e6
Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020260309120440.4 earliest → < 8020020260309120440.4cda2c84 8020020260309120440.4cda2c84
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020260306101701.522 earliest → < 8040020260306101701.522a0ee4 8040020260306101701.522a0ee4
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020260306101701.522 earliest → < 8040020260306101701.522a0ee4 8040020260306101701.522a0ee4
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260309111524 earliest → < 8060020260309111524.ad008a3a 8060020260309111524.ad008a3a
Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020260309111524 earliest → < 8060020260309111524.ad008a3a 8060020260309111524.ad008a3a
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020260309111524 earliest → < 8060020260309111524.ad008a3a 8060020260309111524.ad008a3a
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260302123049.63 earliest → < 8080020260302123049.63b34585 8080020260302123049.63b34585
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260306092921.63 earliest → < 8080020260306092921.63b34585 8080020260306092921.63b34585
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Extended Update Support 9040020260305163703 earliest → < 9040020260305163703.rhel9 9040020260305163703.rhel9
Red Hat Enterprise Linux 9.6 Extended Update Support 9060020260305153549 earliest → < 9060020260305153549.rhel9 9060020260305153549.rhel9

References

Timeline

  1. Published
  2. Last modified

Other CVEs of postgresql

The 79 CVEs of postgresql →
CVE-2026-6471 Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen… 7.2 High CVE-2026-14671 Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating… 8.8 High CVE-2026-6470 Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and… 4.3 Medium CVE-2026-6464 Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as… 8.1 High
Track this CVE