PostgreSQL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 11

• High 8.8
  CVE-2026-6473

  PostgreSQL server undersizes allocations, via integer wraparound

  Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applic…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine
  May 14, 2026
• High 8.8
  CVE-2026-6475 Public exploit

  PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

  Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after t…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine
  May 14, 2026
• High 8.8
  CVE-2026-6477

  PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

  Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like ge…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine
  May 14, 2026
• High 8.8
  CVE-2026-6637

  PostgreSQL refint allows stack buffer overflow and SQL injection

  Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A distinct attack is possible if the application declares a user-controlled column as a "refi…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine
  May 14, 2026
• High 7.5
  CVE-2026-6479

  PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion

  Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same via access to a PostgreSQL TCP…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine
  May 14, 2026
• High 7.2
  CVE-2026-6476

  PostgreSQL pg_createsubscriber allows SQL injection via subscription name

  SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before P…

  postgresql-9.3 postgresql-9.5 postgresql-10 postgresql-12 Debian Ubuntu Alpine
  May 14, 2026
• Medium 6.5
  CVE-2026-6478

  PostgreSQL discloses MD5-hashed passwords via covert timing channel

  Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, cu…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine
  May 14, 2026
• Medium 5.4
  CVE-2026-6472

  PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege

  Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacke…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine
  May 14, 2026
• Medium 4.3
  CVE-2026-6474

  PostgreSQL timeofday() can disclose portions of server memory

  Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine
  May 14, 2026
• Medium 4.3
  CVE-2026-6575

  PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array

  Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major v…

  postgresql-9.3 postgresql-9.5 postgresql-10 postgresql-12 Debian Ubuntu Alpine
  May 14, 2026
• Low 3.7
  CVE-2026-6638

  PostgreSQL REFRESH PUBLICATION allows SQL injection via table name

  SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allows a subscriber table creator to execute arbitrary SQL with the subscription's publication-side credentials. The attack takes effect at the next REFRESH PUBLICATION…

  postgresql-9.3 postgresql-9.5 postgresql-10 postgresql-12 Debian Ubuntu Azure Linux Alpine
  May 14, 2026

Revision history

1. 2026-10-21 #51

   Neue Updates von Oracle Linux aufgenommen

2. 2026-10-13 #50

   Neue Updates von IBM aufgenommen

3. 2026-10-04 #49

   Neue Updates von IBM aufgenommen

4. 2026-09-30 #48

   Neue Updates von Oracle Linux aufgenommen

5. 2026-09-23 #47

   Neue Updates von Oracle Linux aufgenommen

6. 2026-09-16 #46

   Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen

7. 2026-09-15 #45

   Neue Updates von Rocky Enterprise Software Foundation, Oracle Linux und Red Hat aufgenommen

8. 2026-09-13 #44

   Neue Updates von Red Hat aufgenommen

9. 2026-09-03 #43

   Neue Updates von Dell aufgenommen

10. 2026-09-01 #42

    Neue Updates von Red Hat aufgenommen

11. 2026-08-31 #41

    Neue Updates von Dell und Amazon aufgenommen

12. 2026-08-30 #40

    Neue Updates von Red Hat aufgenommen

13. 2026-08-26 #39

    Neue Updates von Red Hat aufgenommen

14. 2026-08-20 #38

    Neue Updates von Ubuntu und Red Hat aufgenommen

15. 2026-08-18 #37

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

16. 2026-08-16 #36

    Neue Updates von Debian und Gentoo aufgenommen

17. 2026-08-13 #35

    Neue Updates von Red Hat aufgenommen

18. 2026-08-11 #34

    Neue Updates von Oracle Linux aufgenommen

19. 2026-08-09 #33

    Neue Updates von Red Hat und F5 aufgenommen

20. 2026-08-05 #32

    Neue Updates von Red Hat aufgenommen

21. 2026-08-04 #31

    Neue Updates von F5 und IBM aufgenommen

22. 2026-08-03 #30

    Neue Updates von Red Hat aufgenommen

23. 2026-07-29 #29

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

24. 2026-07-28 #28

    Neue Updates von Red Hat und F5 aufgenommen

25. 2026-07-27 #27

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

References

• Red Hat Security Advisory RHSA-2026:32983 vom 2026-06-29
  https://access.redhat.com/errata/RHSA-2026:32983
• Red Hat Security Advisory RHSA-2026:32994 vom 2026-06-29
  https://access.redhat.com/errata/RHSA-2026:32994
• Red Hat Security Advisory RHSA-2026:33441 vom 2026-06-30
  https://access.redhat.com/errata/RHSA-2026:33441
• openSUSE Security Update OPENSUSE-SU-2026:21103-1 vom 2026-06-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SW4P7JANODBDIXOUR7X5PRSHE2VC4OR4/
• openSUSE Security Update OPENSUSE-SU-2026:21102-1 vom 2026-06-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3AA7CRUB4GRMHKYYAS25W7U2DMMFQRIU/
• openSUSE Security Update OPENSUSE-SU-2026:21104-1 vom 2026-06-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZNAA6V6MVFVJVMIT6LT2U4NS77FXL5HO/
• Oracle Linux Security Advisory ELSA-2026-27741 vom 2026-07-01
  https://linux.oracle.com/errata/ELSA-2026-27741.html
• Red Hat Security Advisory RHSA-2026:34363 vom 2026-07-01
  https://access.redhat.com/errata/RHSA-2026:34363
• Red Hat Security Advisory RHSA-2026:33497 vom 2026-06-30
  https://access.redhat.com/errata/RHSA-2026:33497
• Red Hat Security Advisory RHSA-2026:34043 vom 2026-07-01
  https://access.redhat.com/errata/RHSA-2026:34043
• PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 Released! vom 2026-05-14
  https://www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/
• PostgreSQL Security Advisory CVE-2026-6472 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6472/
• PostgreSQL Security Advisory CVE-2026-6473 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6473/
• PostgreSQL Security Advisory CVE-2026-6474 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6474/
• PostgreSQL Security Advisory CVE-2026-6475 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6475/
• PostgreSQL Security Advisory CVE-2026-6476 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6476/
• PostgreSQL Security Advisory CVE-2026-6477 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6477/
• PostgreSQL Security Advisory CVE-2026-6478 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6478/
• PostgreSQL Security Advisory CVE-2026-6479 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6479/
• PostgreSQL Security Advisory CVE-2026-6575 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6575/
• PostgreSQL Security Advisory CVE-2026-6637 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6637/
• PostgreSQL Security Advisory CVE-2026-6638 vom 2026-05-14
  https://www.postgresql.org/support/security/CVE-2026-6638/
• Debian Security Advisory DSA-6270 vom 2026-05-14
  https://lists.debian.org/debian-security-announce/2026/msg00181.html
• Debian Security Advisory DSA-6269 vom 2026-05-14
  https://lists.debian.org/debian-security-announce/2026/msg00180.html
• SUSE Security Update SUSE-SU-2026:1945-1 vom 2026-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026110.html
• SUSE Security Update SUSE-SU-2026:1942-1 vom 2026-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026113.html
• SUSE Security Update SUSE-SU-2026:1943-1 vom 2026-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026112.html
• SUSE Security Update SUSE-SU-2026:1944-1 vom 2026-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026111.html
• SUSE Security Update SUSE-SU-2026:1946-1 vom 2026-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026109.html
• openSUSE Security Update OPENSUSE-SU-2026:10806-1 vom 2026-05-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6YSTLJLCOHBA5K6KCIY47SN3JXTACGJL/
• openSUSE Security Update OPENSUSE-SU-2026:10808-1 vom 2026-05-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GQYHZFIKPKIZ7MMEAQ5QEBKP4ZEPVM6O/
• SUSE Security Update SUSE-SU-2026:2000-1 vom 2026-05-19
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026152.html
• SUSE Security Update SUSE-SU-2026:1999-1 vom 2026-05-19
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026153.html
• SUSE Security Update SUSE-SU-2026:2001-1 vom 2026-05-19
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026151.html
• SUSE Security Update SUSE-SU-2026:2007-1 vom 2026-05-19
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026146.html
• Ubuntu Security Notice USN-8294-1 vom 2026-05-21
  https://ubuntu.com/security/notices/USN-8294-1
• openSUSE Security Update OPENSUSE-SU-2026:10828-1 vom 2026-05-22
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RYNAVHGMZLCA7MJQOKRUKYTWYO5QPYBN/
• SUSE Security Update SUSE-SU-2026:2086-1 vom 2026-05-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026358.html
• SUSE Security Update SUSE-SU-2026:2084-1 vom 2026-05-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026360.html
• SUSE Security Update SUSE-SU-2026:2085-1 vom 2026-05-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026359.html
• Red Hat Security Advisory RHSA-2026:21182 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21182
• SUSE Security Update SUSE-SU-2026:2117-1 vom 2026-05-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026392.html
• Red Hat Security Advisory RHSA-2026:22878 vom 2026-06-03
  https://access.redhat.com/errata/RHSA-2026:22878
• openSUSE Security Update OPENSUSE-SU-2026:20901-1 vom 2026-06-05
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E4RJTUOUUH6ZVOY2RAM43VMDKHBNQPKX/
• Amazon Linux Security Advisory ALAS2-2026-3344 vom 2026-06-09
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3344.html
• Amazon Linux Security Advisory ALAS2POSTGRESQL14-2026-023 vom 2026-06-08
  https://alas.aws.amazon.com/AL2/ALAS2POSTGRESQL14-2026-023.html
• Amazon Linux Security Advisory ALAS2POSTGRESQL14-2026-024 vom 2026-06-08
  https://alas.aws.amazon.com/AL2/ALAS2POSTGRESQL14-2026-024.html
• SUSE Security Update SUSE-SU-2026:2303-1 vom 2026-06-08
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026645.html
• SUSE Security Update SUSE-SU-2026:22077-1 vom 2026-06-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026753.html
• Rocky Linux Security Advisory RLSA-2026:26181 vom 2026-06-17
  https://errata.build.resf.org/RLSA-2026:26181
• Rocky Linux Security Advisory RLSA-2026:26203 vom 2026-06-16
  https://errata.build.resf.org/RLSA-2026:26203
• Rocky Linux Security Advisory RLSA-2026:26204 vom 2026-06-17
  https://errata.build.resf.org/RLSA-2026:26204
• Red Hat Security Advisory RHSA-2026:26524 vom 2026-06-17
  https://access.redhat.com/errata/RHSA-2026:26524
• Red Hat Security Advisory RHSA-2026:26203 vom 2026-06-16
  https://access.redhat.com/errata/RHSA-2026:26203
• IBM Security Bulletin 7276589 vom 2026-06-16
  https://www.ibm.com/support/pages/node/7276589
• Red Hat Security Advisory RHSA-2026:26525 vom 2026-06-17
  https://access.redhat.com/errata/RHSA-2026:26525
• Red Hat Security Advisory RHSA-2026:26561 vom 2026-06-17
  https://access.redhat.com/errata/RHSA-2026:26561
• Red Hat Security Advisory RHSA-2026:27718 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:27718
• Red Hat Security Advisory RHSA-2026:27743 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:27743
• Oracle Linux Security Advisory ELSA-2026-26181 vom 2026-06-20
  https://linux.oracle.com/errata/ELSA-2026-26181.html
• Red Hat Security Advisory RHSA-2026:28037 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:28037
• Rocky Linux Security Advisory RLSA-2026:28037 vom 2026-06-23
  https://errata.build.resf.org/RLSA-2026:28037
• Red Hat Security Advisory RHSA-2026:28143 vom 2026-06-23
  https://access.redhat.com/errata/RHSA-2026:28143
• Rocky Linux Security Advisory RLSA-2026:27742 vom 2026-06-24
  https://errata.build.resf.org/RLSA-2026:27742
• Debian Security Advisory DLA-4646 vom 2026-06-24
  https://lists.debian.org/debian-lts-announce/2026/06/msg00035.html
• Rocky Linux Security Advisory RLSA-2026:28999 vom 2026-06-24
  https://errata.build.resf.org/RLSA-2026:28999
• Rocky Linux Security Advisory RLSA-2026:27743 vom 2026-06-24
  https://errata.build.resf.org/RLSA-2026:27743
• Red Hat Security Advisory RHSA-2026:28999 vom 2026-06-24
  https://access.redhat.com/errata/RHSA-2026:28999
• Red Hat Security Advisory RHSA-2026:29815 vom 2026-06-25
  https://access.redhat.com/errata/RHSA-2026:29815
• Red Hat Security Advisory RHSA-2026:29953 vom 2026-06-25
  https://access.redhat.com/errata/RHSA-2026:29953
• Oracle Linux Security Advisory ELSA-2026-28208 vom 2026-06-26
  http://linux.oracle.com/errata/ELSA-2026-28208.html
• Oracle Linux Security Advisory ELSA-2026-28999 vom 2026-06-26
  http://linux.oracle.com/errata/ELSA-2026-28999.html
• Oracle Linux Security Advisory ELSA-2026-26203 vom 2026-06-26
  http://linux.oracle.com/errata/ELSA-2026-26203.html
• Oracle Linux Security Advisory ELSA-2026-28037 vom 2026-06-26
  http://linux.oracle.com/errata/ELSA-2026-28037.html
• Red Hat Security Advisory RHSA-2026:35880 vom 2026-07-06
  https://access.redhat.com/errata/RHSA-2026:35880
• Oracle Linux Security Advisory ELSA-2026-26204 vom 2026-07-08
  https://linux.oracle.com/errata/ELSA-2026-26204.html
• Red Hat Security Advisory RHSA-2026:42555 vom 2026-07-21
  https://access.redhat.com/errata/RHSA-2026:42555
• Oracle Linux Security Advisory ELSA-2026-27742 vom 2026-07-20
  https://linux.oracle.com/errata/ELSA-2026-27742.html
• Oracle Linux Security Advisory ELSA-2026-27743 vom 2026-07-20
  https://linux.oracle.com/errata/ELSA-2026-27743.html
• Red Hat Security Advisory RHSA-2026:44308 vom 2026-07-23
  https://access.redhat.com/errata/RHSA-2026:44308