Known vulnerabilities in libpq (Red Hat package)
Vendor:
Red Hat Inc.
Software:
libpq (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libpq_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
10
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
13.23-1.el9_4.1
13.23-1.el9_2.1
13.23-1.el8_4.1
16.14-1.el10_2
13.23-3.el9_8
13.23-1.el8_8.1
16.11-1.el10_0
12.7-1.el8_2.3
13.23-1.el9_2
13.23-1.el9_6
13.23-1.el8_4
13.23-1.el8_10
16.11-3.el10_1
13.23-1.el9_7
13.23-1.el8_6
13.23-1.el8_8
13.23-1.el9_0
13.23-1.el9_4
13.20-1.el8_6
13.20-1.el8_8
13.20-1.el9_5
13.20-1.el8_10
13.20-1.el8_4
13.20-1.el9_2
13.20-1.el9_4
13.20-1.el9_0
12.7-1.el8_2.2
13.11-1.el8
13.11-1.el9
13.5-1.el8
12.5-2.el8_1
12.5-1.el8_2
12.5-1.el8_0
12.5-1.el8_3
12.1-3.el8
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131455 - Integer overflow CVE-2026-6473 |
CWE-190 | Low | 13.23-1.el8_4.1, 13.23-1.el8_8.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 46 more |
||
| #VU131457 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-6475 |
CWE-59 | Medium | 13.23-1.el8_4.1, 13.23-1.el8_8.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 41 more |
||
| #VU131459 - Stack-based buffer overflow CVE-2026-6477 |
CWE-121 | High | 13.23-1.el8_4.1, 13.23-1.el8_8.1, 13.23-1.el9_2.1, 13.23-1.el9_4.1, 13.23-3.el9_8, 16.14-1.el10_2 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 47 more |
||
| #VU131460 - Information Exposure Through Timing Discrepancy CVE-2026-6478 |
CWE-208 | Medium | 13.23-1.el8_4.1, 13.23-1.el8_8.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 48 more |
||
| #VU118520 - Integer overflow CVE-2025-12818 |
CWE-190 | Medium | 12.7-1.el8_2.3, 13.23-1.el8_4, 13.23-1.el8_6, 13.23-1.el8_8, 13.23-1.el8_10, 13.23-1.el9_0, 13.23-1.el9_2, 13.23-1.el9_4, 13.23-1.el9_6, 13.23-1.el9_7, 16.11-1.el10_0, 16.11-3.el10_1 | 13.11.2025 |
SB2025111368 SB2025112204 SB2025112205 and 64 more |
||
| #VU103970 - Improper input validation CVE-2025-1094 |
CWE-20 | Critical | 12.7-1.el8_2.2, 13.20-1.el8_4, 13.20-1.el8_6, 13.20-1.el8_8, 13.20-1.el8_10, 13.20-1.el9_0, 13.20-1.el9_2, 13.20-1.el9_4, 13.20-1.el9_5 | 14.02.2025 |
SB2025021408 SB2025022038 SB2025022039 and 77 more |
||
| #VU72088 - Out-of-bounds read CVE-2022-41862 |
CWE-125 | Medium | 13.11-1.el8, 13.11-1.el9 | 09.02.2023 |
SB2023020953 SB2023021334 SB2023021335 and 47 more |
||
| #VU58114 - Missing Encryption of Sensitive Data CVE-2021-23222 |
CWE-311 | Medium | 13.5-1.el8 | 11.11.2021 |
SB2021111139 SB2021111708 SB2021111709 and 29 more |
||
| #VU48437 - Improper Access Control CVE-2020-25694 |
CWE-284 | Medium | 12.5-1.el8_0, 12.5-1.el8_2, 12.5-1.el8_3, 12.5-2.el8_1 | 16.11.2020 |
SB2020111609 SB2020111711 SB2020111815 and 35 more |
||
| #VU48438 - Improper input validation CVE-2020-25696 |
CWE-20 | Medium | 12.5-1.el8_0, 12.5-1.el8_2, 12.5-1.el8_3, 12.5-2.el8_1 | 16.11.2020 |
SB2020111609 SB2020111711 SB2020111817 and 32 more |