ГлавнаяУязвимости → CVE-2026-2005
8.8высокая

CVE-2026-2005

→ есть в БДУ: BDU:2026-01722 (на русском)
Описание (на английском; русское — в БДУ выше)

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Затрагиваемое ПО
Postgresql Postgresql
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://www.postgresql.org/support/security/CVE-2026-2005/https://access.redhat.com/errata/RHSA-2026:19009https://access.redhat.com/errata/RHSA-2026:19010https://access.redhat.com/errata/RHSA-2026:3730https://access.redhat.com/errata/RHSA-2026:3887https://access.redhat.com/errata/RHSA-2026:3896https://access.redhat.com/errata/RHSA-2026:4024https://access.redhat.com/errata/RHSA-2026:4059