AZL-95690

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95690.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-95690

Upstream

CVE-2026-14679

Published

2026-08-13T13:17:45Z

Modified

2026-08-29T05:27:27Z

Summary

CVE-2026-14679 affecting package postgresql 16.14-1

Details

Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-14679

Affected packages

Azure Linux:3 / postgresql

Package

Name: postgresql
Purl: pkg:rpm/azure-linux/postgresql

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

16.14-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95690.json"