PT-2026-129067
CVE-2026-105613
·
Published
2026-10-28
·
Updated
2026-10-28
Description by
CVSS 3.1
4.7
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it (when ovecommit is on), which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.
Found an issue in the description? Have something to add? Feel free to write us 👾