CyberRota Analysis
AI-GeneratedPostgreSQL versions prior to 18.5, 17.11, 16.15, 15.19, and 14.24 are vulnerable due to missing authorization checks in DDL commands, which can be exploited by an object creator to create dependencies that lead to denial of service for ALTER and DROP operations. This vulnerability could allow attackers to disrupt database functionality by manipulating type dependencies. Database administrators and organizations using affected PostgreSQL versions should prioritize patching to mitigate potential service disruptions.
Original NVD Description
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL expression did not. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.