These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. This vulnerability can cause the PostgreSQL backend process to crash and terminate all cluster sessions. The issue arises from inadequate input validation, allowing attackers to craft malicious rule rows with out-of-range Weight values. Defenders should pri [truncated]
PostGIS, a popular geospatial database extender for PostgreSQL, contains an out-of-bounds read vulnerability prior to version 3.7.0beta2. This vulnerability allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The issue arises from the improper verification of the FlatGeobuf property metadata decoder, which fails to ensure that the subsequent string bod [truncated]
The address_standardizer extension for PostGIS contains an out-of-bounds write vulnerability. A database user with the ability to supply caller-controlled relation names to standardize_address() can trigger memory corruption by providing a rules table with a classification Type value exceeding the fixed class range. This vulnerability requires immediate attention from defenders and database administrators [truncated]