CVSS 3.8 · Low EPSS 0,20%
Kerentanan Integer Underflow (Wrap or Wraparound) pada postgresql. Skor CVSS 3.1 3.8 (Low) menurut CNA.
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This typically yields a simple SIGSEGV, but rare cases might achieve client-specific integrity impact via the write. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| postgresql | postgresql | Versi 14.0 hingga sebelum 14.24 |
| postgresql | postgresql | Versi 15.0 hingga sebelum 15.19 |
| postgresql | postgresql | Versi 16.0 hingga sebelum 16.15 |
| postgresql | postgresql | Versi 17.0 hingga sebelum 17.11 |
| postgresql | postgresql | Versi 18.0 hingga sebelum 18.5 |