Bug 2515314 (CVE-2026-15742)
| Summary: | CVE-2026-15742 postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | akito5623, dschmidt, jlanda, kshier, rhel-process-autobot, simaishi, stcannon, teagle, watson-tool-maintainers, yguenane |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the `levenshtein()` or `levenshtein_less_equal()` SQL functions. This allows the user to execute arbitrary code as the operating system user running the database, potentially leading to full system compromise.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2524555, 2524556, 2524557, 2524558 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-08-13 13:29:11 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:67280 https://access.redhat.com/errata/RHSA-2026:67280 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:67491 https://access.redhat.com/errata/RHSA-2026:67491 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:67848 https://access.redhat.com/errata/RHSA-2026:67848 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:69698 https://access.redhat.com/errata/RHSA-2026:69698 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:69607 https://access.redhat.com/errata/RHSA-2026:69607 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:69876 https://access.redhat.com/errata/RHSA-2026:69876 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:69923 https://access.redhat.com/errata/RHSA-2026:69923 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:69914 https://access.redhat.com/errata/RHSA-2026:69914 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:70186 https://access.redhat.com/errata/RHSA-2026:70186 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:70559 https://access.redhat.com/errata/RHSA-2026:70559 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:70602 https://access.redhat.com/errata/RHSA-2026:70602 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:70762 https://access.redhat.com/errata/RHSA-2026:70762 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:69924 https://access.redhat.com/errata/RHSA-2026:69924 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:70856 https://access.redhat.com/errata/RHSA-2026:70856 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:70763 https://access.redhat.com/errata/RHSA-2026:70763 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:72283 https://access.redhat.com/errata/RHSA-2026:72283 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:72282 https://access.redhat.com/errata/RHSA-2026:72282 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:72281 https://access.redhat.com/errata/RHSA-2026:72281 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Via RHSA-2026:72363 https://access.redhat.com/errata/RHSA-2026:72363 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:72362 https://access.redhat.com/errata/RHSA-2026:72362 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:72361 https://access.redhat.com/errata/RHSA-2026:72361 A public PoC / exploit for CVE-2026-15742 is now available. PoC: https://github.com/kmkz/Exploits/tree/master/2026/PostgreSQL%20fuzzystrmatch%20OOB%20write%20to%20RCE%20-%20CVE-2026-15742 Article: https://securityonline.info/postgresql-rce-vulnerability-cve-2026-15742/ Red Hat CVE page: https://access.redhat.com/security/cve/cve-2026-15742 The vulnerability allows a low-privileged PostgreSQL database user to achieve arbitrary code execution as the operating system user running the PostgreSQL server when the fuzzystrmatch extension is installed and available. Red Hat currently assigns: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Score: 7.5 (Important) PostgreSQL upstream assigns: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Score: 8.8 Since working public exploit code is now available, could Red Hat Product Security please review whether the current Attack Complexity: High (AC:H) assessment remains appropriate? It may also be useful to update the CVE page to note that public exploit code is available. Thank you. This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Via RHSA-2026:73912 https://access.redhat.com/errata/RHSA-2026:73912 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Extended Lifecycle Support Via RHSA-2026:84585 https://access.redhat.com/errata/RHSA-2026:84585 |