Advisoriesby IbisAWSAWS-2026-166
Issues with Babelfish for Aurora PostgreSQL
No fix yet
Bulletin ID: 2026-166-AWS Publication Date: 11/06/2026 10:00 AM PST Description: We identified two issues in the Babelfish TDS protocol layer: - CVE-2026-119923: A memory-safety issue in the TDS connection-handshake handling could allow a remote, unauthenticated actor to affect the database process. - CVE-2026-119924: A memory-safety issue in the TDS remote-procedure-call request handling could allow a remote, authenticated actor to read adjacent process memory or cause a denial of service. Refer to the article below for the most up-to-date and complete information. Read this article
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Changes since it was listed
Severity: Unrated to Critical
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- NVD
- Also known as
- CVE-2026-119924
More AWS advisories
All AWS
Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM...CVE-2026-122193no fix yetAPT package manager that affects Ubuntu and Debian operating systemsCVE-2026-109518no fix yetGluonTS arbitrary file write during archive extractionCVE-2026-119083no fix yetImproper isolation of shared resources in aws-network-policy-agent in Amazon EKSCVE-2026-122266no fix yetGuest Access to Firecracker Process Memory After a Failed Memory DiscardCVE-2026-122192no fix yetAWS API MCP Server OAuth token audience validation bypassCVE-2026-115413no fix yet