Vulnerability-Lookup

RHSA-2026:50863

Vulnerability from csaf_redhat - Published: 2026-08-05 18:20 - Updated: 2026-08-25 09:43

Summary

Red Hat Security Advisory: libpq security update

Severity

Important

Notes

Topic: An update for libpq is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-6477

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as lo_export(), lo_read(), lo_lseek64(), and lo_tell64(). This allows the superuser to send an arbitrarily large response, overwriting the client's stack memory, specifically in tools like psql and pg_dump. This could lead to arbitrary code execution on the client system.

8.4 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 33 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

9 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:50863	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2477442	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-6477	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477442	external
https://www.cve.org/CVERecord?id=CVE-2026-6477	external
https://nvd.nist.gov/vuln/detail/CVE-2026-6477	external
https://www.postgresql.org/support/security/CVE-2…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libpq is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. \n\nSecurity Fix(es):\n\n* postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:50863",
        "url": "https://access.redhat.com/errata/RHSA-2026:50863"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2477442",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477442"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50863.json"
      }
    ],
    "title": "Red Hat Security Advisory: libpq security update",
    "tracking": {
      "current_release_date": "2026-08-25T09:43:29+00:00",
      "generator": {
        "date": "2026-08-25T09:43:29+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:50863",
      "initial_release_date": "2026-08-05T18:20:20+00:00",
      "revision_history": [
        {
          "date": "2026-08-05T18:20:20+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-05T18:20:20+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-25T09:43:29+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
                  "product_id": "AppStream-10.0.Z.E2S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
                  "product_id": "BaseOS-10.0.Z.E2S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpq-devel-0:16.14-0.el10_0.1.aarch64",
                "product": {
                  "name": "libpq-devel-0:16.14-0.el10_0.1.aarch64",
                  "product_id": "libpq-devel-0:16.14-0.el10_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-devel@16.14-0.el10_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
                "product": {
                  "name": "libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
                  "product_id": "libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-debugsource@16.14-0.el10_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
                "product": {
                  "name": "libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
                  "product_id": "libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-debuginfo@16.14-0.el10_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
                "product": {
                  "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
                  "product_id": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-devel-debuginfo@16.14-0.el10_0.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-0:16.14-0.el10_0.1.aarch64",
                "product": {
                  "name": "libpq-0:16.14-0.el10_0.1.aarch64",
                  "product_id": "libpq-0:16.14-0.el10_0.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq@16.14-0.el10_0.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpq-devel-0:16.14-0.el10_0.1.ppc64le",
                "product": {
                  "name": "libpq-devel-0:16.14-0.el10_0.1.ppc64le",
                  "product_id": "libpq-devel-0:16.14-0.el10_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-devel@16.14-0.el10_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
                "product": {
                  "name": "libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
                  "product_id": "libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-debugsource@16.14-0.el10_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
                "product": {
                  "name": "libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
                  "product_id": "libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-debuginfo@16.14-0.el10_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
                "product": {
                  "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
                  "product_id": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-devel-debuginfo@16.14-0.el10_0.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-0:16.14-0.el10_0.1.ppc64le",
                "product": {
                  "name": "libpq-0:16.14-0.el10_0.1.ppc64le",
                  "product_id": "libpq-0:16.14-0.el10_0.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq@16.14-0.el10_0.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpq-devel-0:16.14-0.el10_0.1.s390x",
                "product": {
                  "name": "libpq-devel-0:16.14-0.el10_0.1.s390x",
                  "product_id": "libpq-devel-0:16.14-0.el10_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-devel@16.14-0.el10_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-debugsource-0:16.14-0.el10_0.1.s390x",
                "product": {
                  "name": "libpq-debugsource-0:16.14-0.el10_0.1.s390x",
                  "product_id": "libpq-debugsource-0:16.14-0.el10_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-debugsource@16.14-0.el10_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
                "product": {
                  "name": "libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
                  "product_id": "libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-debuginfo@16.14-0.el10_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
                "product": {
                  "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
                  "product_id": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-devel-debuginfo@16.14-0.el10_0.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-0:16.14-0.el10_0.1.s390x",
                "product": {
                  "name": "libpq-0:16.14-0.el10_0.1.s390x",
                  "product_id": "libpq-0:16.14-0.el10_0.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq@16.14-0.el10_0.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpq-devel-0:16.14-0.el10_0.1.x86_64",
                "product": {
                  "name": "libpq-devel-0:16.14-0.el10_0.1.x86_64",
                  "product_id": "libpq-devel-0:16.14-0.el10_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-devel@16.14-0.el10_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
                "product": {
                  "name": "libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
                  "product_id": "libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-debugsource@16.14-0.el10_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
                "product": {
                  "name": "libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
                  "product_id": "libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-debuginfo@16.14-0.el10_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
                "product": {
                  "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
                  "product_id": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq-devel-debuginfo@16.14-0.el10_0.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libpq-0:16.14-0.el10_0.1.x86_64",
                "product": {
                  "name": "libpq-0:16.14-0.el10_0.1.x86_64",
                  "product_id": "libpq-0:16.14-0.el10_0.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq@16.14-0.el10_0.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpq-0:16.14-0.el10_0.1.src",
                "product": {
                  "name": "libpq-0:16.14-0.el10_0.1.src",
                  "product_id": "libpq-0:16.14-0.el10_0.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libpq@16.14-0.el10_0.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debuginfo-0:16.14-0.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64"
        },
        "product_reference": "libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le"
        },
        "product_reference": "libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debuginfo-0:16.14-0.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x"
        },
        "product_reference": "libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debuginfo-0:16.14-0.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64"
        },
        "product_reference": "libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debugsource-0:16.14-0.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64"
        },
        "product_reference": "libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debugsource-0:16.14-0.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le"
        },
        "product_reference": "libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debugsource-0:16.14-0.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x"
        },
        "product_reference": "libpq-debugsource-0:16.14-0.el10_0.1.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debugsource-0:16.14-0.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64"
        },
        "product_reference": "libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-0:16.14-0.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.aarch64"
        },
        "product_reference": "libpq-devel-0:16.14-0.el10_0.1.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-0:16.14-0.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.ppc64le"
        },
        "product_reference": "libpq-devel-0:16.14-0.el10_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-0:16.14-0.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.s390x"
        },
        "product_reference": "libpq-devel-0:16.14-0.el10_0.1.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-0:16.14-0.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.x86_64"
        },
        "product_reference": "libpq-devel-0:16.14-0.el10_0.1.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64"
        },
        "product_reference": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le"
        },
        "product_reference": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x"
        },
        "product_reference": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64"
        },
        "product_reference": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-0:16.14-0.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.aarch64"
        },
        "product_reference": "libpq-0:16.14-0.el10_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-0:16.14-0.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.ppc64le"
        },
        "product_reference": "libpq-0:16.14-0.el10_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-0:16.14-0.el10_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.s390x"
        },
        "product_reference": "libpq-0:16.14-0.el10_0.1.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-0:16.14-0.el10_0.1.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.src"
        },
        "product_reference": "libpq-0:16.14-0.el10_0.1.src",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-0:16.14-0.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.x86_64"
        },
        "product_reference": "libpq-0:16.14-0.el10_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debuginfo-0:16.14-0.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64"
        },
        "product_reference": "libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le"
        },
        "product_reference": "libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debuginfo-0:16.14-0.el10_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x"
        },
        "product_reference": "libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debuginfo-0:16.14-0.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64"
        },
        "product_reference": "libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debugsource-0:16.14-0.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64"
        },
        "product_reference": "libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debugsource-0:16.14-0.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le"
        },
        "product_reference": "libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debugsource-0:16.14-0.el10_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x"
        },
        "product_reference": "libpq-debugsource-0:16.14-0.el10_0.1.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-debugsource-0:16.14-0.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64"
        },
        "product_reference": "libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64"
        },
        "product_reference": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le"
        },
        "product_reference": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x"
        },
        "product_reference": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64"
        },
        "product_reference": "libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6477",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-05-14T14:01:31.087667+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477442"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as lo_export(), lo_read(), lo_lseek64(), and lo_tell64(). This allows the superuser to send an arbitrarily large response, overwriting the client\u0027s stack memory, specifically in tools like psql and pg_dump. This could lead to arbitrary code execution on the client system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This IMPORTANT buffer overflow in PostgreSQL libpq allows a malicious server superuser to overwrite client stack memory via lo_* functions. Exploitation requires the victim to connect to a compromised or malicious server (UI:R). The scope is changed as the server attack affects the client system. Impact is high to confidentiality, integrity, and availability through potential client-side code execution. Affects versions before 18.4, 17.10, 16.14, 15.18, and 14.23.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
          "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
          "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
          "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
          "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
          "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
          "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x",
          "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
          "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.aarch64",
          "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.ppc64le",
          "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.s390x",
          "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.x86_64",
          "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
          "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
          "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
          "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
          "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.aarch64",
          "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.ppc64le",
          "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.s390x",
          "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.src",
          "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.x86_64",
          "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
          "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
          "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
          "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
          "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
          "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
          "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x",
          "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
          "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
          "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
          "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
          "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6477"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477442",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477442"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6477",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6477"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6477",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6477"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/support/security/CVE-2026-6477/",
          "url": "https://www.postgresql.org/support/security/CVE-2026-6477/"
        }
      ],
      "release_date": "2026-05-14T13:00:12.497000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-05T18:20:20+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.src",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:50863"
        },
        {
          "category": "workaround",
          "details": "Only connect to trusted PostgreSQL servers. Avoid using psql or pg_dump against untrusted or potentially compromised database servers.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.src",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-devel-0:16.14-0.el10_0.1.x86_64",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
            "AppStream-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.src",
            "BaseOS-10.0.Z.E2S:libpq-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-debuginfo-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-debugsource-0:16.14-0.el10_0.1.x86_64",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.aarch64",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.ppc64le",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.s390x",
            "BaseOS-10.0.Z.E2S:libpq-devel-debuginfo-0:16.14-0.el10_0.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory"
    }
  ]
}

CVE-2026-6477 (GCVE-0-2026-6477)

Vulnerability from cvelistv5 – Published: 2026-05-14 13:00 – Updated: 2026-08-25 12:05

Title

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

Summary

Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like gets(), PQfn(..., result_is_int=0, ...) stores arbitrary-length, server-determined data into a buffer of unspecified size. Because both the \lo_export command in psql and pg_dump call lo_read(), the server superuser can overwrite pg_dump or psql stack memory. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.4 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-14 00:00 UTC

CWE

CWE-242 - Use of Inherently Dangerous Function
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

PostgreSQL redhat root

References

46 references

URL	Tags
https://www.postgresql.org/support/security/CVE-2…
https://access.redhat.com/security/cve/CVE-2026-6477	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2477442	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:49521	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50863	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27718	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27743	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27742	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27738	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28999	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28208	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26181	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28143	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44420	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34362	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34363	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47090	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29815	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:32994	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35880	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42555	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26561	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49908	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33497	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29953	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49909	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26524	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29904	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50779	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:32983	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26525	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29212	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44308	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28037	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26203	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26204	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27741	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54760	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21182	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22878	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44481	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:58981	vendor-advisoryx_refsource_REDHAT

Impacted products

54 products

Vendor	Product	Version
n/a	PostgreSQL	Affected: 18 , < 18.4 (rpm) Affected: 17 , < 17.10 (rpm) Affected: 16 , < 16.14 (rpm) Affected: 15 , < 15.18 (rpm) Affected: 0 , < 14.23 (rpm)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:18.4-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:16.14-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:16.14-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:16.14-0.el10_0.1 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:9.2.24-9.el7_9.6 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260605152259.489197e6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:13.23-2.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260530205218.489197e6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260605152256.489197e6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260605152253.489197e6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 8040020260624104459.522a0ee4 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 8040020260630100922.522a0ee4 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:13.23-1.el8_4.1 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 8040020260624104459.522a0ee4 , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.4
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 8040020260630100922.522a0ee4 , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.4
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:13.23-1.el8_4.1 , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.4
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 8060020260623094704.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 8060020260625065744.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:13.23-1.el8_6.1 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 8060020260623094704.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 8060020260625065744.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 0:13.23-1.el8_6.1 , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.6
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 8080020260615085052.63b34585 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 8080020260626093604.63b34585 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:13.23-1.el8_8.1 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 8080020260709122729.63b34585 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 8080020260615085052.63b34585 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 8080020260626093604.63b34585 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:13.23-1.el8_8.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 8080020260709122729.63b34585 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260605131007.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260605125734.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:13.23-3.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260605124405.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:13.23-1.el9_2.2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 9020020260625101129.rhel9 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:13.23-1.el9_2.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 9040020260612132455.rhel9 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:13.23-1.el9_4.2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 9040020260616071806.rhel9 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:13.23-1.el9_4.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 9060020260612084605.rhel9 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:13.23-1.el9_6.2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 9060020260622062902.rhel9 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:13.23-1.el9_6.1 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Discovery 2	Unaffected: 1786638573 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Hardened Images	Unaffected: 17.10-0.1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 18.4-0.1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1784795076 , < * (rpm) cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1787241260 , < * (rpm) cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Self-service automation portal 2	cpe:/a:redhat:ansible_portal:2

Credits

The PostgreSQL project thanks Yu Kunpeng and Martin Heistermann for reporting this problem.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6477",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:56:18.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql18",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:18.4-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql16",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:16.14-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:16.14-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql16",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:16.14-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:16.14-0.el10_0.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.24-9.el7_9.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:15",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260605152259.489197e6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-2.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:16",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260530205218.489197e6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:13",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260605152256.489197e6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:12",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260605152253.489197e6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:12",
            "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8040020260624104459.522a0ee4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:13",
            "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8040020260630100922.522a0ee4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el8_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:12",
            "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8040020260624104459.522a0ee4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:13",
            "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8040020260630100922.522a0ee4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el8_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:12",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260623094704.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:13",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260625065744.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el8_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:12",
            "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260623094704.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:13",
            "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260625065744.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el8_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:15",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260615085052.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:12",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260626093604.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el8_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:13",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260709122729.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:15",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260615085052.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:12",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260626093604.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el8_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:13",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260709122729.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:16",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260605131007.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:18",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260605125734.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-3.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:15",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260605124405.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-3.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el9_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:15",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9020020260625101129.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el9_2.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:16",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9040020260612132455.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el9_4.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:15",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9040020260616071806.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el9_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:16",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9060020260612084605.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el9_6.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql:15",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9060020260622062902.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "libpq",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:13.23-1.el9_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-server-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786638573",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql17-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "17.10-0.1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "postgresql18-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "18.4-0.1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/rhua-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784795076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhui:5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhui5/rhua-tp-rhel9",
            "product": "Red Hat Update Infrastructure 5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787241260",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unknown",
            "packageName": "postgresql",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "postgresql",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "postgresql-jdbc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-14T13:00:12.497Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as lo_export(), lo_read(), lo_lseek64(), and lo_tell64(). This allows the superuser to send an arbitrarily large response, overwriting the client\u0027s stack memory, specifically in tools like psql and pg_dump. This could lead to arbitrary code execution on the client system."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T12:05:44.549Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-6477"
          },
          {
            "name": "RHBZ#2477442",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477442"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6477.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49521"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50863"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27718"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44391"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27743"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27742"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27738"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28999"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28208"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26181"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28143"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44420"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34362"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34363"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47090"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29815"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:32994"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35880"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42555"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26561"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49908"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33497"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29953"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49909"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26524"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29904"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50779"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:32983"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26525"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29212"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44308"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28037"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26203"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26204"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27741"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54760"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21182"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22878"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44481"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:58981"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:49521: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50863: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27718: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44391: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27743: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27742: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27738: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28999: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28208: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26181: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28143: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44420: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34362: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34363: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47090: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29815: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:32994: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35880: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34043: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42555: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26561: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49908: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33497: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29953: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49909: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33441: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26524: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29904: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50779: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:32983: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26525: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29212: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44308: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28037: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26203: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26204: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27741: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54760: Red Hat Discovery 2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21182: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22878: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44481: Red Hat Update Infrastructure 5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:58981: Red Hat Update Infrastructure 5"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-14T14:01:31.087Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-14T13:00:12.497Z",
            "value": "Made public."
          }
        ],
        "title": "postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory",
        "workarounds": [
          {
            "lang": "en",
            "value": "Only connect to trusted PostgreSQL servers. Avoid using psql or pg_dump against untrusted or potentially compromised database servers."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PostgreSQL",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "18.4",
              "status": "affected",
              "version": "18",
              "versionType": "rpm"
            },
            {
              "lessThan": "17.10",
              "status": "affected",
              "version": "17",
              "versionType": "rpm"
            },
            {
              "lessThan": "16.14",
              "status": "affected",
              "version": "16",
              "versionType": "rpm"
            },
            {
              "lessThan": "15.18",
              "status": "affected",
              "version": "15",
              "versionType": "rpm"
            },
            {
              "lessThan": "14.23",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "The PostgreSQL project thanks Yu Kunpeng and Martin Heistermann for reporting this problem."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response.  Like gets(), PQfn(..., result_is_int=0, ...) stores arbitrary-length, server-determined data into a buffer of unspecified size.  Because both the \\lo_export command in psql and pg_dump call lo_read(), the server superuser can overwrite pg_dump or psql stack memory.  Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-242",
              "description": "Use of Inherently Dangerous Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T13:00:12.497Z",
        "orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "shortName": "PostgreSQL"
      },
      "references": [
        {
          "url": "https://www.postgresql.org/support/security/CVE-2026-6477/"
        }
      ],
      "title": "PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory",
      "workarounds": [
        {
          "lang": "en",
          "value": "use PQexecPrepared(), not PQfn(..., result_is_int=0, ...) or its lo_* wrappers"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
    "assignerShortName": "PostgreSQL",
    "cveId": "CVE-2026-6477",
    "datePublished": "2026-05-14T13:00:12.497Z",
    "dateReserved": "2026-04-17T00:44:19.965Z",
    "dateUpdated": "2026-08-25T12:05:44.549Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:50863

CVE-2026-6477 (GCVE-0-2026-6477)

Tags

Sightings

Nomenclature

Related by attack behaviour