PT-2010-2480 · Postgresql+1 · Postgresql+1
Bernt Marius Johnsen
·
Publicado
2010-03-19
·
Atualizado
2023-02-13
·
CVE-2010-0733
CVSS v2.0
3.5
Baixa
| Vetor | AV:N/AC:M/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions 8.4.1 and earlier
PostgreSQL versions 8.5 through 8.5alpha2
Description
The issue is related to an integer overflow in the
src/backend/executor/nodeHash.c file, which can be exploited by remote authenticated users to cause a denial of service, resulting in a daemon crash. This can be achieved by executing a SELECT statement with many LEFT JOIN clauses, affecting certain hashtable size calculations.Recommendations
For PostgreSQL versions 8.4.1 and earlier, update to a version later than 8.4.1 to resolve the issue.
For PostgreSQL versions 8.5 through 8.5alpha2, update to a version later than 8.5alpha2 to resolve the issue.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Postgresql
Red Hat