CVE-2026-17543 SQL injection in ext-pgsql via E'...' backslash breakout
HighCVSS 8.1
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP(Azure Linux:3.0) | < 8.3.33-1 | 8.3.33-1 |
| PHP | < 8.2.33 | 8.2.33 |
| PHP | < 8.3.33 | 8.3.33 |
| PHP | < 8.4.24 | 8.4.24 |
| PHP | < 8.5.9 | 8.5.9 |
| redhat/php8.4(Red Hat:enterprise_linux:10.2) | < 8.4.24-1.el10_2 | 8.4.24-1.el10_2 |
| redhat/php(Red Hat:enterprise_linux:10.2) | < 8.3.33-1.el10_2 | 8.3.33-1.el10_2 |
| redhat/php:8.2-8100020260806050858.f7998665(Red Hat:enterprise_linux:8) | All versions | No fix listed |
| redhat/php:7.4-8100020260805070257.f7998665(Red Hat:enterprise_linux:8) | All versions | No fix listed |
| redhat/php:8.3-9080020260806131732.9(Red Hat:enterprise_linux:9) | All versions | No fix listed |
| redhat/php(Red Hat:enterprise_linux:9) | < 8.0.30-8.el9_8 | 8.0.30-8.el9_8 |
| redhat/php:8.2-9080020260806120914.9(Red Hat:enterprise_linux:9) | All versions | No fix listed |
| redhat/php-main(Red Hat:hummingbird:1) | < 8.5.9-1.hum1 | 8.5.9-1.hum1 |
| redhat/php(Red Hat:rhel_els:6) | All versions | No fix listed |
| debian/php8.2(Debian:12) | < 8.2.33-1~deb12u1 | 8.2.33-1~deb12u1 |
| debian/php8.2(Debian:12) | = 8.2.10-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.10-2 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.12-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.16-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.16-2 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.17-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.18-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.18-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.20-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.20-2 | No fix listed |
Show 55 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/php8.2(Debian:12) | = 8.2.20-3 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.21-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.23-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.24-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.24-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.26-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.26-4 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.27-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.28-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.29-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.30-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.31-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.32-1~deb12u1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.5-2 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.7-1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.7-1.1 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.7-1.2 | No fix listed |
| debian/php8.2(Debian:12) | = 8.2.7-1~deb12u1 | No fix listed |
| debian/php8.4(Debian:13) | < 8.4.24-1~deb13u1 | 8.4.24-1~deb13u1 |
| debian/php8.4(Debian:13) | = 8.4.11-1 | No fix listed |
| debian/php8.4(Debian:13) | = 8.4.16-1 | No fix listed |
| debian/php8.4(Debian:13) | = 8.4.16-1~deb13u1 | No fix listed |
| debian/php8.4(Debian:13) | = 8.4.20-1 | No fix listed |
| debian/php8.4(Debian:13) | = 8.4.21-1 | No fix listed |
| debian/php8.4(Debian:13) | = 8.4.21-1~deb13u1 | No fix listed |
| debian/php8.4(Debian:13) | = 8.4.22-1 | No fix listed |
| debian/php8.4(Debian:13) | = 8.4.23-1 | No fix listed |
| debian/php8.4(Debian:13) | = 8.4.23-1~deb13u1 | No fix listed |
| debian/php8.4(Debian:14) | < 8.4.24-1 | 8.4.24-1 |
| debian/php8.4(Debian:14) | = 8.4.11-1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.16-1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.16-1~deb13u1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.20-1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.21-1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.21-1~deb13u1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.22-1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.23-1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.23-1~deb13u1 | No fix listed |
| debian/php8.4(Debian:14) | = 8.4.24-1~deb13u1 | No fix listed |
| ubuntu/php8.1(Ubuntu:22.04) | < 8.1.2-1ubuntu2.26 | 8.1.2-1ubuntu2.26 |
| alpine/php82(Alpine:v3.22) | < 8.2.33-r0 | 8.2.33-r0 |
| alpine/php83(Alpine:v3.22) | < 8.3.36-r0 | 8.3.36-r0 |
| alpine/php83(Alpine:v3.23) | < 8.3.36-r0 | 8.3.36-r0 |
| alpine/php83(Alpine:v3.24) | < 8.3.33-r0 | 8.3.33-r0 |
| alpine/php84(Alpine:v3.22) | < 8.4.27-r0 | 8.4.27-r0 |
| alpine/php84(Alpine:v3.23) | < 8.4.27-r0 | 8.4.27-r0 |
| alpine/php84(Alpine:v3.24) | < 8.4.24-r0 | 8.4.24-r0 |
| alpine/php85(Alpine:v3.23) | < 8.5.12-r0 | 8.5.12-r0 |
| alpine/php85(Alpine:v3.24) | < 8.5.9-r0 | 8.5.9-r0 |
| ubuntu/php8.3(Ubuntu:24.04) | < 8.3.6-0ubuntu0.24.04.11 | 8.3.6-0ubuntu0.24.04.11 |
| ubuntu/php8.5(Ubuntu:26.04) | < 8.5.4-0ubuntu1.3 | 8.5.4-0ubuntu1.3 |
| PHP | >= 8.2.0, < 8.2.33 | 8.2.33 |
| PHP | >= 8.3.0, < 8.3.33 | 8.3.33 |
| PHP | >= 8.4.0, < 8.4.24 | 8.4.24 |
| PHP | >= 8.5.0, < 8.5.9 | 8.5.9 |
References
- MSRC Security Update Guide vendor-advisory
- CBL-Mariner Releases vendor-advisory
- github.com vendor-advisory
- Red Hat CVE page mitigation vendor-advisory
- RHSA-2026:56969 patch vendor-advisory
- RHSA-2026:62614 patch vendor-advisory
- RHSA-2026:57574 patch vendor-advisory
- RHSA-2026:62334 patch vendor-advisory
- RHSA-2026:57539 patch vendor-advisory
- RHSA-2026:61259 patch vendor-advisory
- RHSA-2026:61903 patch vendor-advisory
- RHSA-2026:47200 patch vendor-advisory
- Red Hat Bugzilla 2509254 issue-tracking
- www.cve.org
- nvd.nist.gov
- Debian Security Tracker CVE-2026-17543 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-8734-1 vendor-advisory
- USN-8743-1 vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking