105 lines
4.1 KiB
JSON
105 lines
4.1 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2026-116312",
|
|
"assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "PostgreSQL",
|
|
"dateReserved": "2026-10-26T03:52:44.052Z",
|
|
"datePublished": "2026-11-12T14:15:06.946Z",
|
|
"dateUpdated": "2026-11-12T14:15:06.946Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"providerMetadata": {
|
|
"orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
|
|
"shortName": "PostgreSQL",
|
|
"dateUpdated": "2026-11-12T14:15:06.946Z"
|
|
},
|
|
"title": "PostgreSQL MERGE can place the wrong row in a trigger transition table",
|
|
"x_postgresql": {
|
|
"component": "core server"
|
|
},
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Inconsistent transition-capture state in PostgreSQL MERGE allows a table data modifier to make an AFTER trigger process the wrong new row, via a partitioned table MERGE that performs an INSERT before an UPDATE. Within major versions 15-18, minor versions before PostgreSQL 18.7, 17.12, 16.16, and 15.20 are affected. Versions before PostgreSQL 15 are unaffected."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "PostgreSQL",
|
|
"vendor": "n/a",
|
|
"versions": [
|
|
{
|
|
"lessThan": "18.7",
|
|
"status": "affected",
|
|
"version": "18",
|
|
"versionType": "rpm"
|
|
},
|
|
{
|
|
"lessThan": "17.12",
|
|
"status": "affected",
|
|
"version": "17",
|
|
"versionType": "rpm"
|
|
},
|
|
{
|
|
"lessThan": "16.16",
|
|
"status": "affected",
|
|
"version": "16",
|
|
"versionType": "rpm"
|
|
},
|
|
{
|
|
"lessThan": "15.20",
|
|
"status": "affected",
|
|
"version": "15",
|
|
"versionType": "rpm"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"cweId": "CWE-1250",
|
|
"type": "CWE",
|
|
"description": "Improper Preservation of Consistency Between Independent Representations of Shared State"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://www.postgresql.org/support/security/CVE-2026-116312/"
|
|
}
|
|
],
|
|
"metrics": [
|
|
{
|
|
"format": "CVSS",
|
|
"cvssV3_1": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
|
|
"baseScore": 5.4,
|
|
"baseSeverity": "MEDIUM"
|
|
}
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"lang": "en",
|
|
"value": "a partitioned table has an AFTER UPDATE statement trigger with a transition table"
|
|
}
|
|
],
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "The PostgreSQL project thanks Jacek Bylina, Timothy Ball, Jacob Robertson, Nigel Gott, and Claude and Ada Logics for reporting this problem."
|
|
}
|
|
]
|
|
}
|
|
}
|
|
} |