VDB
JLSEC-2026-55
JLSEC-2026-55
PUBLISHED
CVSS 8.800000190734863 HIGH
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | LibPQ_jll | 14.1.0+0, 14.1.0+0 |
| Julia | LibPQ_jll | 14.1.0+0 |
Timeline
- Apr 3, 2026 CVE Published
- Jul 18, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHSA-2026:19009 url
- https://access.redhat.com/errata/RHSA-2026:19010 url
- https://access.redhat.com/errata/RHSA-2026:3730 url
- https://access.redhat.com/errata/RHSA-2026:3887 url
- https://access.redhat.com/errata/RHSA-2026:3896 url
- https://access.redhat.com/errata/RHSA-2026:4024 url
- https://access.redhat.com/errata/RHSA-2026:4059 url
- https://access.redhat.com/errata/RHSA-2026:4063 url
- https://access.redhat.com/errata/RHSA-2026:4064 url
- https://access.redhat.com/errata/RHSA-2026:4074 url
- https://access.redhat.com/errata/RHSA-2026:4075 url
- https://access.redhat.com/errata/RHSA-2026:4110 url
- https://access.redhat.com/errata/RHSA-2026:4254 url
- https://access.redhat.com/errata/RHSA-2026:4441 url
- https://access.redhat.com/errata/RHSA-2026:4475 url
- https://access.redhat.com/errata/RHSA-2026:4504 url
- https://access.redhat.com/errata/RHSA-2026:4505 url
- https://access.redhat.com/errata/RHSA-2026:4506 url
- https://access.redhat.com/errata/RHSA-2026:4509 url
- https://access.redhat.com/errata/RHSA-2026:4515 url
…and 14 more