ByteOS

cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*

>>postgresql>>8.2

cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*

>>postgresql>>8.2.1

cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*

>>postgresql>>8.2.2

cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*

>>postgresql>>8.2.3

cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*

>>postgresql>>8.2.4

cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*

>>postgresql>>8.2.5

cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*

>>postgresql>>8.2.6

cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*

>>postgresql>>8.2.7

cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*

>>postgresql>>8.2.8

cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*

>>postgresql>>8.2.9

cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*

>>postgresql>>8.2.10

cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*

>>postgresql>>8.2.11

cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*

>>postgresql>>8.2.12

cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*

>>postgresql>>8.2.13

cpe:2.3:a:postgresql:postgresql:8.3:*:*:*:*:*:*:*

>>postgresql>>8.3

cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*

>>postgresql>>8.3.1

cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*

>>postgresql>>8.3.2

cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*

>>postgresql>>8.3.3

cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*

>>postgresql>>8.3.4

cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*

>>postgresql>>8.3.5

cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*

>>postgresql>>8.3.6

cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*

>>postgresql>>8.3.7

cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*

>>postgresql>>8.4

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2009-09-24T00:00:00

Not vulnerable. This issue did not affect the versions of PostgreSQL as shipped with Red Hat Enterprise Linux 3, 4, or 5. In PostgreSQL versions prior to 8.2, only database administrator was able to LOAD additional plugins and use it to cause server crash. However, this does not bypass trust boundary, so its not a security flaw for older PostgreSQL versions. Additionally, no plugins are shipped in Red Hat PostgreSQL packages by default. This issue was addressed in Red Hat Application Stack v2 via https://rhn.redhat.com/errata/RHSA-2009-1461.html .

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=134124585221119&w=2	cve@mitre.org	N/A
http://secunia.com/advisories/36660	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/36727	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/36800	cve@mitre.org	N/A
http://secunia.com/advisories/36837	cve@mitre.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1	cve@mitre.org	N/A
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012	cve@mitre.org	N/A
http://www.postgresql.org/docs/8.3/static/release-8-3-8.html	cve@mitre.org	N/A
http://www.postgresql.org/support/security.html	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/archive/1/509917/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/36314	cve@mitre.org	N/A
http://www.ubuntu.com/usn/usn-834-1	cve@mitre.org	N/A
http://www.us.debian.org/security/2009/dsa-1900	cve@mitre.org	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=522092	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html	cve@mitre.org	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://marc.info/?l=bugtraq&m=134124585221119&w=2

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/36660

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/36727

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/36800

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/36837

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.postgresql.org/docs/8.3/static/release-8-3-8.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.postgresql.org/support/security.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/archive/1/509917/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/36314

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/usn-834-1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.us.debian.org/security/2009/dsa-1900

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=522092

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html

Source: cve@mitre.org

Resource: N/A

Similar CVEs

7Records found

CVE-2006-5541

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-1.76% / 81.83%

7 Day CHG~0.00%

Published-26 Oct, 2006 | 17:00

Updated-07 Aug, 2024 | 19:55

backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.

Product-postgresql n/a

CVE-2006-5540

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-1.62% / 81.07%

7 Day CHG~0.00%

Published-26 Oct, 2006 | 17:00

Updated-07 Aug, 2024 | 19:55

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Product-postgresql n/a

CVE-2006-5542

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-1.62% / 81.07%

7 Day CHG~0.00%

Published-26 Oct, 2006 | 17:00

Updated-07 Aug, 2024 | 19:55

backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements.

Product-postgresql n/a

CVE-2009-0922

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-8.64% / 92.07%

7 Day CHG~0.00%

Published-17 Mar, 2009 | 17:00

Updated-07 Aug, 2024 | 04:57

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

Product-postgresql n/a

CWE ID-CWE-399

Not Available

CVE-2007-4772

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-1.08% / 76.93%

7 Day CHG~0.00%

Published-09 Jan, 2008 | 21:00

Updated-07 Aug, 2024 | 15:08

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

Vendor-n/a Canonical Ltd.The PostgreSQL Global Development Group Debian GNU/Linux TCL

Product-ubuntu_linux tcl\/tk debian_linux postgresql n/a

CWE ID-CWE-399

Not Available

CVE-2012-2655

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-4||MEDIUM

EPSS-1.49% / 80.29%

7 Day CHG~0.00%

Published-18 Jul, 2012 | 23:00

Updated-11 Apr, 2025 | 00:51

PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.

Product-postgresql n/a

CVE-2014-0066

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-4||MEDIUM

EPSS-1.91% / 82.56%

7 Day CHG~0.00%

Published-28 Mar, 2014 | 17:00

Updated-12 Apr, 2025 | 10:46

The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.