| Description: | | PostgreSQL is a free and open-source object-relational database management system developed by the PostgreSQL organization. It supports most SQL standards and provides many other features, such as foreign keys, triggers, views, etc. PostgreSQL versions prior to 18.5, prior to 17.11, prior to 16.15, prior to 15.19, and prior to 14.24 contain a buffer overflow vulnerability. This vulnerability arises from a heap buffer overflow when to_char(timestamptz) processes long POSIX time zone abbreviations, which may allow the party selecting the time zone to execute arbitrary code as the operating system user running the database. |