AZL-95747
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95747.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-95747
- Upstream
- Published
- 2026-08-13T13:17:46Z
- Modified
- 2026-08-30T14:18:05.238656732Z
- Summary
- CVE-2026-15742 affecting package postgresql 16.14-1
- Details
-
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshteinlessequal(). Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
- References