AZL-86831

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86831.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-86831

Upstream

CVE-2026-6474

Published

2026-05-14T14:16:24Z

Modified

2026-08-28T17:46:05Z

Summary

CVE-2026-6474 affecting package postgresql for versions less than 16.14-1

Details

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-6474

Affected packages

Azure Linux:3 / postgresql

Package

Name: postgresql
Purl: pkg:rpm/azure-linux/postgresql

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

16.14-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86831.json"