UBUNTU-CVE-2026-116333: Medium severity ubuntu/postgresql-9.3 vulnerability
Buffer over-read in PostgreSQL parallel B-tree scans allows an object creator to read attacker-chosen server-memory addresses, via a function incorrectly marked PARALLEL SAFE or STABLE to make participating workers build different scan-key arrays. Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected. Versions before PostgreSQL 17 are unaffected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 18.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.12
Event History
Frequently Asked Questions
Which PostgreSQL deployments are affected?
PostgreSQL 17 releases before 17.12 and PostgreSQL 18 releases before 18.7 are affected. Versions before PostgreSQL 17 are unaffected.
What access does an attacker need to exploit this issue?
The attacker must be able to create an object and arrange for a function incorrectly marked PARALLEL SAFE or STABLE. Exploitation also depends on a parallel B-tree scan in which participating workers construct different scan-key arrays.
What is the potential impact?
A successful exploit can allow the object creator to read attacker-chosen addresses in PostgreSQL server memory. The stated impact is confidentiality loss; integrity and availability impacts are not indicated.