PT-2026-7845 · Unknown+5 · Postgresql+4
Team Xint Code
·
Published
2026-01-01
·
Updated
2026-05-19
·
CVE-2026-2005
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions prior to 18.2
PostgreSQL versions prior to 17.8
PostgreSQL versions prior to 16.12
PostgreSQL versions prior to 15.16
PostgreSQL versions prior to 14.21
Description
A heap buffer overflow in the
pgcrypto component allows a ciphertext provider to execute arbitrary code as the operating system user running the database. This issue may enable a remote attacker or a low-privilege user to achieve remote code execution (RCE).Recommendations
Update to version 18.2
Update to version 17.8
Update to version 16.12
Update to version 15.16
Update to version 14.21
As a temporary workaround, consider restricting the use of the
pgcrypto module to minimize the risk of exploitation.Fix
DoS
RCE
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Postgresql
Red Os
Rocky Linux
Ubuntu