5.9
Moyenne
CVE-2025-4207 Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary…
Description
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| postgresql 17 | 17 → < 17.5 | 17.5 |
| postgresql 16 | 16 → < 16.9 | 16.9 |
| postgresql 15 | 15 → < 15.13 | 15.13 |
| postgresql 14 | 14 → < 14.18 | 14.18 |
| postgresql 13.21 | premières → < 13.21 | 13.21 |
Références
- www.postgresql.org www.postgresql.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de postgresql
Les 79 CVE de postgresql →
CVE-2026-6471
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen…
7.2
Élevée
CVE-2026-14671
Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating…
8.8
Élevée
CVE-2026-6470
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and…
4.3
Moyenne
CVE-2026-6464
Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as…
8.1
Élevée