Every CVE Search/ Get API key

CVE-2026-6575

PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array

4.3 MediumFix available

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

0.21%Up 0.2 points since May 15, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.3

PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Record
CVE-2026-6575
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-126
Updated
2026-11-02
EUVDEUVD-2026-30287 4.3

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Record
EUVD-2026-30287
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-f8xc-gmqx-v9fh 4.3

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of...

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Record
GHSA-f8xc-gmqx-v9fh
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-126
Updated
2026-11-02
NVD 4.3

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Record
CVE-2026-6575
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-126
Updated
2026-11-02
OSVALPINE-CVE-2026-6575 4.3

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Record
ALPINE-CVE-2026-6575
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVBELL-CVE-2026-6575 4.3
Record
BELL-CVE-2026-6575
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
Show 16 moreShow less
OSVDEBIAN-CVE-2026-6575 4.3

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Record
DEBIAN-CVE-2026-6575
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:21182 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:21182
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:22878 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:22878
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26204 8.8

Red Hat Security Advisory: postgresql:18 security update

Record
RHSA-2026:26204
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:27742 8.8

Red Hat Security Advisory: postgresql18 security update

Record
RHSA-2026:27742
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-6575 4.3

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Record
UBUNTU-CVE-2026-6575
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVALSA-2026:26204 No score

Important: postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)
  • postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
  • postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
  • postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:26204
Updated
2026-11-02
OSVALSA-2026:27742 No score

Important: postgresql18 security update

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Security Fix(es):

  • postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)
  • postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
  • postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
  • postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:27742
Updated
2026-11-02
OSVBIT-postgresql-2026-6575 No score

PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.

Record
BIT-postgresql-2026-6575
Updated
2026-11-02
OSVMGASA-2026-0151 No score

Updated postgresql15 packages fix security vulnerabilities

PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege. (CVE-2026-6472) PostgreSQL server undersizes allocations, via integer wraparound. (CVE-2026-6473) PostgreSQL timeofday() can disclose portions of server memory. (CVE-2026-6474) PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice. (CVE-2026-6475) PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory. (CVE-2026-6477) PostgreSQL discloses MD5-hashed passwords via covert timing channel. (CVE-2026-6478) PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion. (CVE-2026-6479) PostgreSQL refint allows stack buffer overflow and SQL injection. (CVE-2026-6637)

Record
MGASA-2026-0151
Updated
2026-11-02
OSVopenSUSE-SU-2026:10828-1 No score

libecpg6-18.4-1.1 on GA media

These are all security issues fixed in the libecpg6-18.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10828-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20901-1 No score

Security update for postgresql18

This update for postgresql18 fixes the following issues

Security issues:

  • CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).
  • CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).
  • CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).
  • CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).
  • CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).
  • CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).
  • CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).
  • CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).
  • CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).
  • CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).
  • CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).

Non security issue:

  • Update to version 18.4.
  • Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14820).
Record
openSUSE-SU-2026:20901-1
Updated
2026-11-02
OSVSUSE-SU-2026:1944-1 No score

Security update for postgresql18

This update for postgresql18 fixes the following issues

Update to version 18.4.

Security issues:

  • CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).
  • CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).
  • CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).
  • CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).
  • CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).
  • CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).
  • CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).
  • CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).
  • CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).
  • CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).
  • CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).

Non security issue:

  • Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14820).
  • /usr/bin/pg_config is missing after migrating away from update-alternatives (bsc#1263804).
Record
SUSE-SU-2026:1944-1
Updated
2026-11-02
OSVSUSE-SU-2026:1945-1 No score

Security update for postgresql18

This update for postgresql18 fixes the following issues

Update to version 18.4.

Security issues:

  • CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).
  • CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).
  • CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).
  • CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).
  • CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).
  • CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).
  • CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).
  • CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).
  • CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).
  • CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).
  • CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).

Non security issue:

  • Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14820).
  • /usr/bin/pg_config is missing after migrating away from update-alternatives (bsc#1263804).
Record
SUSE-SU-2026:1945-1
Updated
2026-11-02
OSVSUSE-SU-2026:1946-1 No score

Security update for postgresql18

This update for postgresql18 fixes the following issues

Update to version 18.4.

Security issues:

  • CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).
  • CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).
  • CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).
  • CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).
  • CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).
  • CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).
  • CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).
  • CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).
  • CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).
  • CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).
  • CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).

Non security issue:

  • Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14820).
  • /usr/bin/pg_config is missing after migrating away from update-alternatives (bsc#1263804).
Record
SUSE-SU-2026:1946-1
Updated
2026-11-02
OSVSUSE-SU-2026:22077-1 No score

Security update for postgresql18

This update for postgresql18 fixes the following issues

Security issues:

  • CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172).
  • CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173).
  • CVE-2026-6474: Guard against malicious time zone names (bsc#1265174).
  • CVE-2026-6475: Prevent path traversal in pg_basebackup and pg_rewind (bsc#1265175).
  • CVE-2026-6476: Properly quote subscription names in pg_createsubscriber (bsc#1265176).
  • CVE-2026-6477: Mark PQfn() as unsafe, and avoid using it within libpq (bsc#1265177).
  • CVE-2026-6478: Use timing-safe string comparisons in authentication code (bsc#1265178).
  • CVE-2026-6479: Prevent unbounded recursion while processing startup packets (bsc#1265179).
  • CVE-2026-6575: Detect faulty input when restoring attribute MCV statistics (bsc#1265180).
  • CVE-2026-6637: Prevent SQL injection and buffer overruns in contrib/spi (bsc#1265181).
  • CVE-2026-6638: Properly quote object names in logical replication origin checks (bsc#1265182).

Non security issue:

  • Update to version 18.4.
  • Get rid of update-alternatives for openSUSE/SLE 16.0 and newer to support immutable systems and transactional updates (jsc#PED-14820).
Record
SUSE-SU-2026:22077-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql18
Alpine:v3.23
 before 18.4-r0
18.4-r0
postgresql18
Alpine:v3.24
 before 18.4-r0
18.4-r0
pg_repack
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.5.3-1.module_el9.8.0+234+5456f35d
1.5.3-1.module_el9.8.0+234+5456f35d
pgaudit
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.0-1.module_el9.8.0+234+5456f35d
18.0-1.module_el9.8.0+234+5456f35d
pgvector
AlmaLinux:9
From an advisory covering 11 CVEs
 before 0.8.1-1.module_el9.8.0+234+5456f35d
0.8.1-1.module_el9.8.0+234+5456f35d
postgis
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.6.1-2.module_el9.8.0+239+6fb51d38
3.6.1-2.module_el9.8.0+239+6fb51d38
postgis-client
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.6.1-2.module_el9.8.0+239+6fb51d38
3.6.1-2.module_el9.8.0+239+6fb51d38
postgis-docs
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.6.1-2.module_el9.8.0+239+6fb51d38
3.6.1-2.module_el9.8.0+239+6fb51d38
postgis-upgrade
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.6.1-2.module_el9.8.0+239+6fb51d38
3.6.1-2.module_el9.8.0+239+6fb51d38
postgis-utils
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.6.1-2.module_el9.8.0+239+6fb51d38
3.6.1-2.module_el9.8.0+239+6fb51d38
Show 151 moreShow less
Affected packages
PackageAffectedFixed
postgres-decoderbufs
AlmaLinux:9
From an advisory covering 11 CVEs
 before 3.3.1-1.Final.module_el9.8.0+234+5456f35d
3.3.1-1.Final.module_el9.8.0+234+5456f35d
postgresql
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-contrib
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-docs
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-plperl
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-plpython3
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-pltcl
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-private-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-private-libs
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-server
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-server-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-static
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-test
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-test-rpm-macros
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-upgrade
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql-upgrade-devel
AlmaLinux:9
From an advisory covering 11 CVEs
 before 18.4-2.module_el9.8.0+280+5ad12178
18.4-2.module_el9.8.0+280+5ad12178
postgresql18
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-contrib
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-docs
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-plperl
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-plpython3
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-private-devel
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-private-libs
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-server
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-server-devel
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-static
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-test
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-test-rpm-macros
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-upgrade
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18-upgrade-devel
AlmaLinux:10
From an advisory covering 11 CVEs
 before 18.4-1.el10_2
18.4-1.el10_2
postgresql18
Alpaquita:stream
 18.0-r0 up to 18.4-r0
18.4-r0
postgresql
Bitnami
 18.0.0 up to 18.4.0
18.4.0
postgresql-18
Debian:14
 before 18.4-1, plus listed versions
18.0-118.1-118.1-218.2-118.3-1
Show 14 moreShow less
18~beta1+20250612-118~beta1+20250624-118~beta1+20250701-118~beta1-118~beta2-118~beta3-118~rc1-118~rc1-218~rc1-318~~devel.20250318+g4078da6c478-118~~devel.20250331-118~~devel.20250405-118~~devel.20250421-118~~devel.20250502-1
18.4-1
postgresql15
Mageia:9
From an advisory covering 11 CVEs
 before 15.18-1.mga9
15.18-1.mga9
postgresql17
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-contrib
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-docs
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-plperl
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-plpython3
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-pltcl
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-private-devel
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-private-libs
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-server
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-server-devel
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-static
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-test
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-test-rpm-macros
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-upgrade
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql17-upgrade-devel
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:17.10-0.1.hum1
0:17.10-0.1.hum1
postgresql
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-contrib
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-docs
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-plperl
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-plpython3
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-private-devel
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-private-libs
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-server
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-server-devel
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-static
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-test
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-test-rpm-macros
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-upgrade
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql-upgrade-devel
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
postgresql18
Red Hat:hummingbird:1
From an advisory covering 11 CVEs
 before 0:18.4-0.1.hum1
0:18.4-0.1.hum1
pg_repack
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.5.3-1.module+el9.8.0+23739+1c42644c
0:1.5.3-1.module+el9.8.0+23739+1c42644c
pg_repack-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.5.3-1.module+el9.8.0+23739+1c42644c
0:1.5.3-1.module+el9.8.0+23739+1c42644c
pg_repack-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.5.3-1.module+el9.8.0+23739+1c42644c
0:1.5.3-1.module+el9.8.0+23739+1c42644c
pgaudit
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.0-1.module+el9.8.0+23739+1c42644c
0:18.0-1.module+el9.8.0+23739+1c42644c
pgaudit-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.0-1.module+el9.8.0+23739+1c42644c
0:18.0-1.module+el9.8.0+23739+1c42644c
pgaudit-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.0-1.module+el9.8.0+23739+1c42644c
0:18.0-1.module+el9.8.0+23739+1c42644c
pgvector
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:0.8.1-1.module+el9.8.0+23739+1c42644c
0:0.8.1-1.module+el9.8.0+23739+1c42644c
pgvector-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:0.8.1-1.module+el9.8.0+23739+1c42644c
0:0.8.1-1.module+el9.8.0+23739+1c42644c
pgvector-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:0.8.1-1.module+el9.8.0+23739+1c42644c
0:0.8.1-1.module+el9.8.0+23739+1c42644c
postgis
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgis-client
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgis-client-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgis-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgis-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgis-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgis-upgrade
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgis-upgrade-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgis-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.6.1-2.module+el9.8.0+23739+1c42644c
0:3.6.1-2.module+el9.8.0+23739+1c42644c
postgres-decoderbufs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
postgres-decoderbufs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
postgres-decoderbufs-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
postgresql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-contrib
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-contrib-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-docs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-plperl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-plperl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-plpython3
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-plpython3-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-pltcl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-pltcl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-private-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-private-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-private-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-server-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-server-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-static
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-test
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-test-rpm-macros
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-upgrade
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-upgrade-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-upgrade-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql-upgrade-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:18.4-2.module+el9.8.0+24359+da7fad50
0:18.4-2.module+el9.8.0+24359+da7fad50
postgresql18
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-contrib
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-contrib-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-docs
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-docs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-plperl
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-plperl-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-plpython3
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-plpython3-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-pltcl-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-private-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-private-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-private-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-server
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-server-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-server-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-server-devel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-static
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-test
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-test-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-upgrade
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-upgrade-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-upgrade-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-upgrade-devel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18-test-rpm-macros
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:18.4-1.el10_2
0:18.4-1.el10_2
postgresql18
SUSE:Linux Enterprise Server 16.0
From an advisory covering 11 CVEs
 before 18.4-160000.1.1
18.4-160000.1.1
postgresql18
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 11 CVEs
 before 18.4-160000.1.1
18.4-160000.1.1
postgresql-9.3
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
9.3.1-19.3.2-19.3.2-1ubuntu19.3.2-1ubuntu29.3.3-1
Show 24 moreShow less
9.3.3-1bzr19.3.3-1bzr29.3.4-19.3.5-0ubuntu0.14.04.19.3.6-0ubuntu0.14.049.3.7-0ubuntu0.14.049.3.8-0ubuntu0.4.049.3.9-0ubuntu0.14.049.3.10-0ubuntu0.14.049.3.11-0ubuntu0.14.049.3.12-0ubuntu0.14.049.3.13-0ubuntu0.14.049.3.14-0ubuntu0.14.049.3.15-0ubuntu0.14.049.3.16-0ubuntu0.14.049.3.17-0ubuntu0.14.049.3.18-0ubuntu0.14.04.19.3.19-0ubuntu0.14.049.3.20-0ubuntu0.14.049.3.21-0ubuntu0.14.049.3.22-0ubuntu0.14.049.3.23-0ubuntu0.14.049.3.24-0ubuntu0.14.049.3.24-0ubuntu0.14.04+esm1
 None known
postgresql-9.5
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
9.5.0-19.5.0-29.5.0-39.5.1-19.5.2-1
Show 29 moreShow less
9.5.3-0ubuntu0.16.049.5.4-0ubuntu0.16.049.5.5-0ubuntu0.16.049.5.6-0ubuntu0.16.049.5.7-0ubuntu0.16.049.5.8-0ubuntu0.16.04.19.5.9-0ubuntu0.16.049.5.10-0ubuntu0.16.049.5.11-0ubuntu0.16.049.5.12-0ubuntu0.16.049.5.13-0ubuntu0.16.049.5.14-0ubuntu0.16.049.5.16-0ubuntu0.16.04.19.5.17-0ubuntu0.16.04.19.5.18-0ubuntu0.16.04.19.5.19-0ubuntu0.16.04.19.5.21-0ubuntu0.16.04.19.5.23-0ubuntu0.16.04.19.5.24-0ubuntu0.16.04.19.5.25-0ubuntu0.16.04.19.5.25-0ubuntu0.16.04.1+esm19.5.25-0ubuntu0.16.04.1+esm29.5.25-0ubuntu0.16.04.1+esm39.5.25-0ubuntu0.16.04.1+esm49.5.25-0ubuntu0.16.04.1+esm59.5.25-0ubuntu0.16.04.1+esm69.5.25-0ubuntu0.16.04.1+esm79.5.25-0ubuntu0.16.04.1+esm89.5.25-0ubuntu0.16.04.1+esm10
 None known
postgresql-10
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
10.1-110.1-210.2-110.3-110.4-0ubuntu0.18.04
Show 21 moreShow less
10.5-0ubuntu0.18.0410.6-0ubuntu0.18.04.110.7-0ubuntu0.18.04.110.8-0ubuntu0.18.04.110.9-0ubuntu0.18.04.110.10-0ubuntu0.18.04.110.12-0ubuntu0.18.04.110.14-0ubuntu0.18.04.110.15-0ubuntu0.18.04.110.16-0ubuntu0.18.04.110.17-0ubuntu0.18.04.110.18-0ubuntu0.18.04.110.19-0ubuntu0.18.04.110.20-0ubuntu0.18.04.110.21-0ubuntu0.18.04.110.22-0ubuntu0.18.04.110.23-0ubuntu0.18.04.110.23-0ubuntu0.18.04.210.23-0ubuntu0.18.04.2+esm110.23-0ubuntu0.18.04.2+esm210.23-0ubuntu0.18.04.2+esm3
 None known
postgresql-12
Ubuntu:20.04:LTS
 All versions, plus listed versions
12.0-112.1-112.1-2build112.2-112.2-1ubuntu2
Show 21 moreShow less
12.2-412.4-0ubuntu0.20.04.112.5-0ubuntu0.20.04.112.6-0ubuntu0.20.04.112.7-0ubuntu0.20.04.112.8-0ubuntu0.20.04.112.9-0ubuntu0.20.04.112.10-0ubuntu0.20.04.112.11-0ubuntu0.20.04.112.12-0ubuntu0.20.04.112.13-0ubuntu0.20.04.112.14-0ubuntu0.20.04.112.15-0ubuntu0.20.04.112.16-0ubuntu0.20.04.112.17-0ubuntu0.20.04.112.18-0ubuntu0.20.04.112.19-0ubuntu0.20.04.112.20-0ubuntu0.20.04.112.22-0ubuntu0.20.04.112.22-0ubuntu0.20.04.212.22-0ubuntu0.20.04.4
 None known
postgresql-14
Ubuntu:22.04:LTS
 before 14.23-0ubuntu0.22.04.1, plus listed versions
14.1-1ubuntu114.2-114.2-1ubuntu114.3-0ubuntu0.22.04.114.4-0ubuntu0.22.04.1
Show 15 moreShow less
14.5-0ubuntu0.22.04.114.6-0ubuntu0.22.04.114.7-0ubuntu0.22.04.114.8-0ubuntu0.22.04.114.9-0ubuntu0.22.04.114.10-0ubuntu0.22.04.114.11-0ubuntu0.22.04.114.12-0ubuntu0.22.04.114.13-0ubuntu0.22.04.114.15-0ubuntu0.22.04.114.17-0ubuntu0.22.04.114.18-0ubuntu0.22.04.114.19-0ubuntu0.22.04.114.20-0ubuntu0.22.04.114.22-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1
postgresql-16
Ubuntu:24.04:LTS
 before 16.14-0ubuntu0.24.04.1, plus listed versions
16.0-216.1-116.1-1build116.1-1build316.2-1
Show 12 moreShow less
16.2-1ubuntu216.2-1ubuntu316.2-1ubuntu416.3-0ubuntu0.24.04.116.4-0ubuntu0.24.04.116.4-0ubuntu0.24.04.216.6-0ubuntu0.24.04.116.8-0ubuntu0.24.04.116.9-0ubuntu0.24.04.116.10-0ubuntu0.24.04.116.11-0ubuntu0.24.04.116.13-0ubuntu0.24.04.1
16.14-0ubuntu0.24.04.1
postgresql-17
Ubuntu:25.10
 before 17.10-0ubuntu0.25.10.1, plus listed versions
17.4-117.4-217.5-117.5-1build117.6-117.6-1build117.7-0ubuntu0.25.10.117.9-0ubuntu0.25.10.1
17.10-0ubuntu0.25.10.1
postgresql-18
Ubuntu:26.04:LTS
 before 18.4-0ubuntu0.26.04.1, plus listed versions
18.0-118.1-118.1-1ubuntu118.1-1ubuntu218.1-218.3-1
18.4-0ubuntu0.26.04.1
postgresql18
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 18.4-1.1
18.4-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-6575 is a medium vulnerability (CVSS 4.3) in Postgresql, published May 14, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 10th percentile. Fixed in postgresql18 18.4-r0.

References

Show 108 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open