CVE-2026-4427

HIGH

Github.com/jackc/pgproto3: pgproto3: denial of service via negative field length in datarow message

Title source: cna
STIX 2.1

Description

Rejected reason: Duplicate of CVE-2026-32286

Scores

CVSS v3 7.5
EPSS 0.0009
EPSS Percentile 24.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-129
Status published
Products (15)
jackc/pgproto3 0Go
Red Hat/Assisted Installer for Red Hat OpenShift Container Platform 2
Red Hat/Multicluster Engine for Kubernetes
Red Hat/Multicluster Global Hub
Red Hat/Red Hat Advanced Cluster Management for Kubernetes 2
Red Hat/Red Hat Advanced Cluster Security 4
Red Hat/Red Hat Enterprise Linux 10
Red Hat/Red Hat Enterprise Linux 8
Red Hat/Red Hat Enterprise Linux 9
Red Hat/Red Hat OpenShift AI (RHOAI)
... and 5 more
Published Mar 19, 2026
Tracked Since Mar 19, 2026