ALPINE-CVE-2026-116333: Medium severity alpine/postgresql15 vulnerability
Buffer over-read in PostgreSQL parallel B-tree scans allows an object creator to read attacker-chosen server-memory addresses, via a function incorrectly marked PARALLEL SAFE or STABLE to make participating workers build different scan-key arrays. Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected. Versions before PostgreSQL 17 are unaffected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/postgresql15to a version that resolves this vulnerability.Fixed in 15.20-r0 - Upgrade
Upgrade
alpine/postgresql16to a version that resolves this vulnerability.Fixed in 16.16-r0 - Upgrade
Upgrade
alpine/postgresql17to a version that resolves this vulnerability.Fixed in 17.12-r0 - Upgrade
Upgrade
alpine/postgresql18to a version that resolves this vulnerability.Fixed in 18.7-r0 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 18.7 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 17.12
Event History
Frequently Asked Questions
Which deployments are affected?
PostgreSQL 17 releases before 17.12 and PostgreSQL 18 releases before 18.7 are affected. PostgreSQL versions before 17 are unaffected.
What access does an attacker need to exploit this issue?
The attacker must be able to create an object and use a function incorrectly marked PARALLEL SAFE or STABLE. Exploitation requires parallel B-tree scans in which participating workers construct different scan-key arrays.
What is the potential impact?
A successful exploit allows the object creator to read attacker-chosen addresses in PostgreSQL server memory. The issue affects confidentiality; no integrity or availability impact is specified.
How can the risk be reduced before upgrading?
The provided information identifies incorrectly marked PARALLEL SAFE or STABLE functions as an exploitation prerequisite. Review and avoid such function markings where they can cause parallel workers to build different scan-key arrays.