GitHub Advisoryadvisory · PyPI

GHSA-vm3q-58wm-2r2x libpg_query memory leak

HIGH Published 2022-05-13 Modified 2024-11-26 Official page ↗
Aliases
CVE-2018-18482
Ecosystem
PyPI
Packages
pg-query, pglast
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-772
Reviewed
2024-11-22

Affected packages

• PyPI pg-query: < 0.28 → fixed in 0.28 • PyPI pglast: < 0.28 → fixed in 0.28

Description

An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.

Related

Alias · CVE (1)

  • CVE-2018-18482 An issue was discovered in libpg_query 10-1.0.2. vulnerability

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References