CyberSecBulletin

openGauss-server vulnerabilities

We track 2 vulnerabilities in openGauss-server products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest openGauss-server vulnerabilities

  • 7.0 High severity

    openGauss-connector-jdbc: Use of Externally-Controlled Input to Select Classes or Code

    CVE-2026-111440openGauss-server

    在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName 加载类后，直接反射调用以 String 为参数的构造函数，再转换为 Log。缺少 asSubclass(Log.class) 校验，非 Log 实现类也会在类型检查前被实例化。因此，当攻击者可控制 JDBC URL 或连接属性中的 logge

  • 8.1 High severity

    openGauss-server: Heap-based Buffer Overflow

    CVE-2026-111441openGauss-server

    在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_SIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpy_s() 拷贝输入，既未校验 lenTotal >= lenUsed，也将 memcpy_s()