PostgreSQL psqlODBC Treiber: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 5.9
  CVE-2026-109448

  psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters

  Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding paramete…

  PostgreSQL psqlODBC psqlodbc psqlodbc Debian Ubuntu
  Oct 12, 2026

Revision history

1. 2026-11-11 #3

   Neue Updates von SUSE aufgenommen

2. 2026-10-27 #2

   Neue Updates von openSUSE aufgenommen

3. 2026-10-19 #1

   Initiale Fassung

References

• PostgreSQL 19 RC 1 ReleaseNotes vom 2026-10-19
  https://www.postgresql.org/about/news/psqlodbc-18000005-released-with-security-fix-for-cve-2026-109448-3404/
• NIST Vulnerability Database vom 2026-10-19
  https://nvd.nist.gov/vuln/detail/cve-2026-109448
• GitHub advisory vom 2026-10-12
  https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-cmfx-rm3r-p2jr
• openSUSE Security Update OPENSUSE-SU-2026:12135-1 vom 2026-10-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GANEACIR4X2U6S26EW4DFMBCGVX2LLS7/
• SUSE Security Update SUSE-SU-2026:5191-1 vom 2026-11-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030630.html
• SUSE Security Update SUSE-SU-2026:5192-1 vom 2026-11-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030629.html