PostgreSQL Buffer Over-Read Vulnerability in GB18030 Encoding Validation Allowing Denial-of-Service

A buffer over-read vulnerability has been identified in PostgreSQL's GB18030 encoding validation. This issue allows a database input provider to cause a temporary denial-of-service condition on platforms where a one-byte over-read can lead to process termination. The vulnerability affects the PostgreSQL database server and libpq, with versions prior to PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 being vulnerable.

Impact

Exploitation of this vulnerability can lead to a process crash, causing a temporary denial-of-service condition.

Remediation

Users can upgrade to PostgreSQL versions 17.5, 16.9, 15.13, 14.18, or 13.21 to address this vulnerability.