PT-2011-1461 · Postgresql+1 · Postgresql+1
Geoff Keating
·
Publicado
2011-02-02
·
Atualizado
2017-08-17
·
CVE-2010-4015
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
PostgreSQL versions 8.2.x through 8.2.19
PostgreSQL versions 8.3.x through 8.3.13
PostgreSQL versions 8.4.x through 8.4.6
PostgreSQL versions 9.0.x through 9.0.2
Description
The issue is related to a buffer overflow in the gettoken function in the intarray array module. This can be exploited by an authenticated database user to cause a denial of service or possibly execute arbitrary code by calling functions with certain parameters, specifically integers with a large number of digits.
Recommendations
For PostgreSQL versions 8.2.x through 8.2.19, update to version 8.2.20 or later.
For PostgreSQL versions 8.3.x through 8.3.13, update to version 8.3.14 or later.
For PostgreSQL versions 8.4.x through 8.4.6, update to version 8.4.7 or later.
For PostgreSQL versions 9.0.x through 9.0.2, update to version 9.0.3 or later.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Postgresql
Red Hat