Description
Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
Remediation
References
Related Vulnerabilities
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7872)
WordPress Plugin VDZ CallBack Cross-Site Scripting (1.14.5)
Grafana CVE-2022-39307 Vulnerability (CVE-2022-39307)
WordPress Plugin Mang Board WP Unspecified Vulnerability (2.0.3)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-1476)