Skip to content
OpenAdvisories

Package · Ubuntu

postgresql-17

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-6475 Public exploit

    PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

    Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after t…

    postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  • High 8.8
    CVE-2026-2005 Public exploit

    PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

    Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

    postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  • High 8.8
    CVE-2025-8714 Public exploit

    PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

    Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pg_dumpall…

    postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine