REDHAT-BUG-2414826: Medium severity PostgreSQL libpq vulnerability
Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2414826?
REDHAT-BUG-2414826 is considered a high severity vulnerability due to the potential for out-of-bounds memory writes leading to application crashes.
How do I fix REDHAT-BUG-2414826?
To fix REDHAT-BUG-2414826, upgrade the PostgreSQL libpq client library to the latest version that is not affected by this vulnerability.
Which versions of PostgreSQL libpq are affected by REDHAT-BUG-2414826?
Affected versions of PostgreSQL libpq include all versions up to 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23.
What impact does REDHAT-BUG-2414826 have on applications using libpq?
The impact of REDHAT-BUG-2414826 includes potential segmentation faults in applications, causing unexpected crashes due to memory corruption.
How can I verify if my system is vulnerable to REDHAT-BUG-2414826?
You can verify if your system is vulnerable to REDHAT-BUG-2414826 by checking the version of the PostgreSQL libpq client library installed on your system.