Nixpkgs security tracker
8.8 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
9 packages
- python314Packages.pgvector
- python313Packages.pgvector
- postgresqlPackages.pgvectorscale
- postgresql14Packages.pgvectorscale
- postgresql15Packages.pgvectorscale
- postgresql16Packages.pgvectorscale
- postgresql17Packages.pgvectorscale
- postgresql19Packages.pgvectorscale
- postgresql18Packages.pgvectorscale
- @LeSuisse accepted
- @LeSuisse published on GitHub
pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.
References
Affected products
- <0.8.6
Matching in nixpkgs
pkgs.postgresqlPackages.pgvector
Open-source vector similarity search for PostgreSQL
pkgs.postgresql14Packages.pgvector
Open-source vector similarity search for PostgreSQL
pkgs.postgresql15Packages.pgvector
Open-source vector similarity search for PostgreSQL
pkgs.postgresql16Packages.pgvector
Open-source vector similarity search for PostgreSQL
pkgs.postgresql17Packages.pgvector
Open-source vector similarity search for PostgreSQL
pkgs.postgresql18Packages.pgvector
Open-source vector similarity search for PostgreSQL
pkgs.postgresql19Packages.pgvector
Open-source vector similarity search for PostgreSQL
Ignored packages (9)
pkgs.python313Packages.pgvector
Pgvector support for Python
pkgs.python314Packages.pgvector
Pgvector support for Python
pkgs.postgresqlPackages.pgvectorscale
Complement to pgvector for high performance, cost efficient vector search on large workloads
pkgs.postgresql14Packages.pgvectorscale
Complement to pgvector for high performance, cost efficient vector search on large workloads
pkgs.postgresql15Packages.pgvectorscale
Complement to pgvector for high performance, cost efficient vector search on large workloads
pkgs.postgresql16Packages.pgvectorscale
Complement to pgvector for high performance, cost efficient vector search on large workloads
pkgs.postgresql17Packages.pgvectorscale
Complement to pgvector for high performance, cost efficient vector search on large workloads
pkgs.postgresql18Packages.pgvectorscale
Complement to pgvector for high performance, cost efficient vector search on large workloads
pkgs.postgresql19Packages.pgvectorscale
Complement to pgvector for high performance, cost efficient vector search on large workloads