Описание
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
Релиз | Статус | Примечание |
---|---|---|
dapper | released | 8.1.23-0ubuntu0.6.06.1 |
devel | DNE | |
hardy | DNE | |
karmic | DNE | |
lucid | DNE | |
maverick | DNE | |
natty | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
dapper | DNE | |
devel | DNE | |
hardy | released | 8.3.14-0ubuntu8.04 |
karmic | ignored | end of life |
lucid | DNE | |
maverick | DNE | |
natty | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
dapper | DNE | |
devel | not-affected | 8.4.7-1 |
hardy | DNE | |
karmic | released | 8.4.7-0ubuntu0.9.10 |
lucid | released | 8.4.7-0ubuntu0.10.04 |
maverick | released | 8.4.7-0ubuntu0.10.10 |
natty | not-affected | 8.4.7-1 |
upstream | needs-triage |
Показывать по
EPSS
6.5 Medium
CVSS2
Связанные уязвимости
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
Buffer overflow in the gettoken function in contrib/intarray/_int_bool ...
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
EPSS
6.5 Medium
CVSS2