CVE-2026-2003 PostgreSQL oidvector discloses a few bytes of memory
MediumCVSS 4.3
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/postgresql-15(Debian:12) | < 15.16-0+deb12u1 | 15.16-0+deb12u1 |
| debian/postgresql-15(Debian:12) | = 15.10-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.11-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.12-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.12-0+deb12u2 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.13-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.14-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.15-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.3-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.3-1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.4-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.4-1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.4-2 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.4-3 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.5-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.6-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.7-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.8-0+deb12u1 | No fix listed |
| debian/postgresql-15(Debian:12) | = 15.9-0+deb12u1 | No fix listed |
| debian/postgresql-17(Debian:13) | < 17.8-0+deb13u1 | 17.8-0+deb13u1 |
| debian/postgresql-17(Debian:13) | = 17.5-1 | No fix listed |
| debian/postgresql-17(Debian:13) | = 17.6-0+deb13u1 | No fix listed |
| debian/postgresql-17(Debian:13) | = 17.6-1 | No fix listed |
| debian/postgresql-17(Debian:13) | = 17.7-0+deb13u1 | No fix listed |
| debian/postgresql-18(Debian:14) | < 18.2-1 | 18.2-1 |
Show 59 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/postgresql-18(Debian:14) | = 18.0-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18.1-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18.1-2 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~beta1+20250612-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~beta1+20250624-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~beta1+20250701-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~beta1-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~beta2-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~beta3-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~rc1-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~rc1-2 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~rc1-3 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~~devel.20250318+g4078da6c478-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~~devel.20250331-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~~devel.20250405-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~~devel.20250421-1 | No fix listed |
| debian/postgresql-18(Debian:14) | = 18~~devel.20250502-1 | No fix listed |
| ubuntu/postgresql-14(Ubuntu:22.04) | < 14.22-0ubuntu0.22.04.1 | 14.22-0ubuntu0.22.04.1 |
| redhat/postgresql16(Red Hat:enterprise_linux:10.1) | < 16.13-1.el10_1 | 16.13-1.el10_1 |
| redhat/postgresql18(Red Hat:enterprise_linux:10.2) | < 18.3-1.el10_2 | 18.3-1.el10_2 |
| redhat/postgresql16(Red Hat:enterprise_linux:10.2) | < 16.13-1.el10_2 | 16.13-1.el10_2 |
| redhat/postgresql16(Red Hat:enterprise_linux_eus:10.0) | < 16.13-1.el10_0 | 16.13-1.el10_0 |
| redhat/postgresql:15-8100020260227221316.489197e6(Red Hat:enterprise_linux:8) | All versions | No fix listed |
| redhat/postgresql:16-8100020260227221401.489197e6(Red Hat:enterprise_linux:8) | All versions | No fix listed |
| redhat/postgresql:15-8080020260306092921.63b34585(Red Hat:rhel_e4s:8.8) | All versions | No fix listed |
| redhat/postgresql(Red Hat:enterprise_linux:9) | < 13.23-2.el9_7 | 13.23-2.el9_7 |
| redhat/postgresql:15-9070020260227094950.rhel9(Red Hat:enterprise_linux:9) | All versions | No fix listed |
| redhat/postgresql:16-9070020260227095951.rhel9(Red Hat:enterprise_linux:9) | All versions | No fix listed |
| redhat/postgresql:15-9020020260309133405.rhel9(Red Hat:rhel_e4s:9.2) | All versions | No fix listed |
| redhat/postgresql:16-9040020260306102041.rhel9(Red Hat:rhel_eus:9.4) | All versions | No fix listed |
| redhat/postgresql:15-9040020260305163703.rhel9(Red Hat:rhel_eus:9.4) | All versions | No fix listed |
| redhat/postgresql:15-9060020260309125703.rhel9(Red Hat:rhel_eus:9.6) | All versions | No fix listed |
| redhat/postgresql:16-9060020260305153549.rhel9(Red Hat:rhel_eus:9.6) | All versions | No fix listed |
| redhat/postgresql18-main(Red Hat:hummingbird:1) | < 18.3-1.2.hum1 | 18.3-1.2.hum1 |
| redhat/rhui5/rhua-rhel9:1773670137(Red Hat:rhui:5::el9) | All versions | No fix listed |
| redhat/postgresql(Red Hat:rhel_els:6) | All versions | No fix listed |
| redhat/postgresql(Red Hat:rhel_els:7) | All versions | No fix listed |
| redhat/postgresql:12/postgresql(Red Hat:enterprise_linux:8) | All versions | No fix listed |
| redhat/postgresql:13/postgresql(Red Hat:enterprise_linux:8) | All versions | No fix listed |
| redhat/postgresql:18/postgresql(Red Hat:enterprise_linux:9) | All versions | No fix listed |
| alpine/postgresql15(Alpine:v3.20) | < 15.16-r0 | 15.16-r0 |
| alpine/postgresql15(Alpine:v3.22) | < 15.16-r0 | 15.16-r0 |
| alpine/postgresql16(Alpine:v3.20) | < 16.12-r0 | 16.12-r0 |
| alpine/postgresql16(Alpine:v3.21) | < 16.12-r0 | 16.12-r0 |
| alpine/postgresql16(Alpine:v3.22) | < 16.12-r0 | 16.12-r0 |
| alpine/postgresql16(Alpine:v3.23) | < 16.12-r0 | 16.12-r0 |
| alpine/postgresql16(Alpine:v3.24) | < 16.12-r0 | 16.12-r0 |
| alpine/postgresql17(Alpine:v3.21) | < 17.8-r0 | 17.8-r0 |
| alpine/postgresql17(Alpine:v3.22) | < 17.8-r0 | 17.8-r0 |
| alpine/postgresql17(Alpine:v3.23) | < 17.8-r0 | 17.8-r0 |
| alpine/postgresql17(Alpine:v3.24) | < 17.8-r0 | 17.8-r0 |
| alpine/postgresql18(Alpine:v3.23) | < 18.2-r0 | 18.2-r0 |
| alpine/postgresql18(Alpine:v3.24) | < 18.2-r0 | 18.2-r0 |
| ubuntu/postgresql-16(Ubuntu:24.04) | < 16.13-0ubuntu0.24.04.1 | 16.13-0ubuntu0.24.04.1 |
| postgresql | >= 14.0, < 14.21 | 14.21 |
| postgresql | >= 15.0, < 15.16 | 15.16 |
| postgresql | >= 16.0, < 16.12 | 16.12 |
| postgresql | >= 17.0, < 17.8 | 17.8 |
| postgresql | >= 18.0, < 18.2 | 18.2 |
References
- www.postgresql.org vendor-advisory
- Debian Security Tracker CVE-2026-2003 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-8072-1 vendor-advisory
- www.cve.org
- Red Hat CVE page mitigation vendor-advisory
- RHSA-2026:3887 patch vendor-advisory
- RHSA-2026:19009 patch vendor-advisory
- RHSA-2026:19010 patch vendor-advisory
- RHSA-2026:4441 patch vendor-advisory
- RHSA-2026:4059 patch vendor-advisory
- RHSA-2026:4063 patch vendor-advisory
- RHSA-2026:4515 patch vendor-advisory
- RHSA-2026:3730 patch vendor-advisory
- RHSA-2026:3896 patch vendor-advisory
- RHSA-2026:4110 patch vendor-advisory
- RHSA-2026:4254 patch vendor-advisory
- RHSA-2026:4544 patch vendor-advisory
- RHSA-2026:4548 patch vendor-advisory
- RHSA-2026:4546 patch vendor-advisory
- RHSA-2026:4547 patch vendor-advisory
- RHSA-2026:8756 patch vendor-advisory
- RHSA-2026:4943 patch vendor-advisory
- Red Hat Bugzilla 2439322 issue-tracking
- nvd.nist.gov
- security.alpinelinux.org vendor-advisory