Description
SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping them, while the other catalog functions escape them. An application that passes an untrusted table or schema name to SQLSpecialColumns lets the caller execute arbitrary SQL with the privileges of the connection. Versions before psqlODBC 18.00.0006 are affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PostgreSQL | psqlODBC | < 18.00.0006 | 18.00.0006 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | psqlodbc | 1:18.00.0006-1 | — |
| Debian 13 | psqlodbc | No fix yet | — |
| Debian 12 | psqlodbc | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | psqlodbc | No fix yet | — |
| Ubuntu 26.04 LTS | psqlodbc | No fix yet | — |
| Ubuntu 24.04 LTS | psqlodbc | No fix yet | — |
| Ubuntu 22.04 LTS | psqlodbc | No fix yet | — |
| Ubuntu 20.04 LTS | psqlodbc | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | psqlodbc | No fix yet | — |
| Ubuntu 16.04 LTS | psqlodbc | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | psqlODBC | 18.00.0006-150600.3.5.1 | SUSE-SU-2026:5191-1 |
| SLES 15 SP6 | psqlODBC | 18.00.0006-150600.3.5.1 | SUSE-SU-2026:5191-1 |
| SLES 12 SP5 | psqlODBC | 18.00.0006-1.8.1 | SUSE-SU-2026:5192-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | psqlODBC | 18.00.0006-150600.3.5.1 | SUSE-SU-2026:5191-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | psqlODBC | 18.00.0006-1.1 | openSUSE-SU-2026:12472-1 |
| openSUSE Leap 16.0 | psqlODBC | 18.00.0006-bp160.1.1 | openSUSE-SU-2026:22261-1 |
Advisories 4
- SUSE-SU-2026:5192-1 Security update for psqlODBC SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5191-1 Security update for psqlODBC SUSE / openSUSE Security Updates · Nov 12, 2026
- openSUSE-SU-2026:22261-1 Security update for psqlODBC SUSE / openSUSE Security Updates · Nov 11, 2026
- openSUSE-SU-2026:12472-1 psqlODBC-18.00.0006-1.1 on GA media SUSE / openSUSE Security Updates · Nov 7, 2026