7.5
High
CVE-2026-32286 The DataRow.Decode function fails to properly validate field lengths
Description
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| github.com/jackc/pgproto3/v2 | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Multicluster Global Hub 1.3.4 1779209992 | earliest → < 1779209992 | 1779209992 |
| Multicluster Global Hub 1.4.5 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.5.4 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.2 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat Advanced Cluster Security for Kubernetes 4.8 1777307791 | earliest → < 1777307791 | 1777307791 |
| Red Hat Quay 3.12 1776752646 | earliest → < 1776752646 | 1776752646 |
Show the 34 other branches Hide the 34 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Quay 3.14 1779689392 | earliest → < 1779689392 | 1779689392 |
| Red Hat Quay 3.15 1780891395 | earliest → < 1780891395 | 1780891395 |
| Red Hat Quay 3.16 1779204086 | earliest → < 1779204086 | 1779204086 |
| Red Hat Quay 3.17 1779922205 | earliest → < 1779922205 | 1779922205 |
| Red Hat Quay 3.1 1776736910 | earliest → < 1776736910 | 1776736910 |
| Red Hat Quay 3.9 1776782369 | earliest → < 1776782369 | 1776782369 |
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Versions not published | |
| Multicluster Engine for Kubernetes | Versions not published | |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| Red Hat OpenShift Cluster Manager CLI | Versions not published | |
| Red Hat OpenShift on AWS | Versions not published | |
| Red Hat Quay 3 | Versions not published | |
| Multicluster Global Hub | Versions not published | |
| Red Hat Advanced Cluster Security 4 | Versions not published | |
| Red Hat Hardened Images | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat Trusted Artifact Signer | Versions not published | |
| Red Hat Quay 3.10 1776736910 | earliest → < 1776736910 | 1776736910 |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Advanced Cluster Security 4.8 1777307791 | earliest → < 1777307791 | 1777307791 |
| Red Hat multicluster global hub 1.4.3 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.5.6 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.4 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.4.4 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.6.0 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.5.0 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.5.7 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.5 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.4.2 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.5.1 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat multicluster global hub 1.5.3 1778867753 | earliest → < 1778867753 | 1778867753 |
References
- github.com github.com
- github.com github.com
- github.com github.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified