ALPINE-CVE-2026-120141: High severity alpine/postgresql15 vulnerability
Type confusion in PostgreSQL materialized set-returning functions allows a database user to execute arbitrary code as the operating system user running the database, via returning rows having different dynamic RECORD return types. jsonpopulaterecordset() is one affected function. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/postgresql15to a version that resolves this vulnerability.Fixed in 15.20-r0 - Upgrade
Upgrade
alpine/postgresql16to a version that resolves this vulnerability.Fixed in 16.16-r0 - Upgrade
Upgrade
alpine/postgresql17to a version that resolves this vulnerability.Fixed in 17.12-r0 - Upgrade
Upgrade
alpine/postgresql18to a version that resolves this vulnerability.Fixed in 18.7-r0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 18.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.12 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.16 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.20 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.25
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs a database user account with low privileges. No user interaction is required, and the attack can be performed remotely over the network.
Which PostgreSQL releases need to be updated?
PostgreSQL 14 before 14.25, 15 before 15.20, 16 before 16.16, 17 before 17.12, and 18 before 18.7 are affected. The listed Alpine packages are postgresql15, postgresql16, postgresql17, and postgresql18.
What is the impact if exploitation succeeds?
An attacker can execute arbitrary code as the operating system user that runs the database server. This can result in complete compromise of confidentiality, integrity, and availability for resources accessible to that operating system account.