High [CVE-2026-14669] Arbitrary code execution via long POSIX timezone abbreviation
This high-severity Red Hat Linux advisory covers CVE-2026-14669 affecting Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise. This risk is highest where untrusted users can modify timezone settings.
Red Hat severity: Important — CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-122.
Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 12 more.
- < 18.5
- < 17.11
- < 16.15
- < 15.19
- < 14.24
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
- postgresql18-0:18.6-1.el10_2
- postgresql16-0:16.15-1.el10_2
- postgresql16-0:16.15-1.el10_0
- postgresql:16-8100020260910192321.489197e6
- postgresql:15-8100020260906175012.489197e6
- postgresql:12-8100020260917081510.489197e6
- postgresql:12-8040020260924163759.522a0ee4
- postgresql:12-8060020260923144955.ad008a3a
- postgresql:15-8080020260921162003.63b34585
- postgresql:12-8080020260923144922.63b34585
- postgresql:16-9080020260907191505.rhel9
- postgresql:18-9080020260914093252.rhel9
- postgresql-0:13.23-6.el9_8
- postgresql:15-9080020260903073937.rhel9
- postgresql:15-9020020260917092006.rhel9
- postgresql-0:13.23-1.el9_2.5
- postgresql:15-9040020260917091622.rhel9
- postgresql:16-9040020260922062609.rhel9
- postgresql-0:13.23-1.el9_4.4
- postgresql:15-9060020260917102335.rhel9
- postgresql:16-9060020260921091101.rhel9
- postgresql-0:13.23-1.el9_6.5
- ansible-automation-platform/bootc-automation-portal-rhel9:1790657374
- rhui5/rhua-rhel9:1790242004
- RHSA-2026:67280
- RHSA-2026:70186
- RHSA-2026:72282
- RHSA-2026:69876
- RHSA-2026:69923
- RHSA-2026:69924
- RHSA-2026:73912
- RHSA-2026:72363
- RHSA-2026:70602
- RHSA-2026:72362
- RHSA-2026:67491
- RHSA-2026:67848
- RHSA-2026:69607
- RHSA-2026:69914
- RHSA-2026:70763
- RHSA-2026:72361
- RHSA-2026:70762
- RHSA-2026:70856
- RHSA-2026:72283
- RHSA-2026:69698
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
Mitigation checklist
- To reduce the risk of exploitation, ensure that only trusted users have privileges to modify timezone settings within the PostgreSQL database. Additionally, restrict network access to the PostgreSQL server to only trusted clients and applications through firewall rules, limiting the attack surface for remote exploitation.
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.