工业硅周评：供需收缩延续 成本托底显现

yun2025

工业硅周评：供需收缩延续 成本托底显现

Babelfish for PostgreSQL：数据库兼容扩展的预登录解析器存在缓冲区溢出

11月7日公开的漏洞记录CVE-2026-119923涉及Babelfish for PostgreSQL。该扩展让PostgreSQL环境能够接收使用TDS协议的客户端。异常数据在登录前即可能进入解析程序，并使堆上的写操作越界。公告称，远程请求在特定情况下可能获得数据库进程账户的执行权限，同时列出了扩展的多个受影响分支。版本清单标出的受影响范围包括1.0至1.5（含）、2.1至2.15（含）、3.1至3.12（含）、4.0至4.8（含）、5.1至5.4（含）。

这条记录给出的CVSS 3.1基础评分为9.8分，分级为严重。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。

https://v.youku.com/v_show/id_XNjU4Nzg0OTM2NA==.html
https://v.youku.com/v_show/id_XNjU4Nzg1MDYyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NzY2MA==.html
https://v.youku.com/v_show/id_XNjU3ODE2MjEwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzg1MzcwOA==.html
https://v.youku.com/v_show/id_XNjU3ODE1OTE0OA==.html
https://v.youku.com/v_show/id_XNjU4Nzg1MDUxNg==.html
https://v.youku.com/v_show/id_XNjU3ODE2MjAyOA==.html
https://v.youku.com/v_show/id_XNjU3ODE2MDc5Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzg1MzYxNg==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NzUwMA==.html
https://v.youku.com/v_show/id_XNjU3ODE2MzUwMA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0ODk2NA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NjMyMA==.html
https://v.youku.com/v_show/id_XNjU3ODE2MDU0OA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NzQwNA==.html
https://v.youku.com/v_show/id_XNjU3ODE2MzQzNg==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NzI5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE1NDM5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE1ODgxNg==.html
https://v.youku.com/v_show/id_XNjU3ODE1ODgwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NzI2NA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NzI0MA==.html
https://v.youku.com/v_show/id_XNjU3ODE2MzI4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0MzE4OA==.html
https://v.youku.com/v_show/id_XNjU3ODE1NzI5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODE1ODY2OA==.html
https://v.youku.com/v_show/id_XNjU3ODE2MDE1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODE1NTc0OA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NDI1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE2MDE0MA==.html
https://v.youku.com/v_show/id_XNjU3ODE1NDIxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NTc2OA==.html
https://v.youku.com/v_show/id_XNjU3ODE2MDA5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE1ODYwNA==.html
https://v.youku.com/v_show/id_XNjU3ODE1MjYyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NTc1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE2MDAzMg==.html
https://v.youku.com/v_show/id_XNjU3ODE1MjYxMg==.html
https://v.youku.com/v_show/id_XNjU3ODE1NTYzNg==.html
https://v.youku.com/v_show/id_XNjU3ODE2MDAyOA==.html
https://v.youku.com/v_show/id_XNjU3ODE1NTYyOA==.html
https://v.youku.com/v_show/id_XNjU3ODE1MjU4OA==.html
https://v.youku.com/v_show/id_XNjU3ODE1NDA1Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzg0Mjg5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODE1NTU4MA==.html
https://v.youku.com/v_show/id_XNjU3ODE1NDAzNg==.html
https://v.youku.com/v_show/id_XNjU4Nzg0Mjg3Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NDA4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzg0NTY2OA==.html