PT-2012-4164 · Postgresql+3 · Postgresql+3

Publicado

2012-06-25

·

Atualizado

2024-06-15

·

CVE-2012-2655

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions PostgreSQL versions 8.3.x through 8.3.18 PostgreSQL versions 8.4.x through 8.4.11 PostgreSQL versions 9.0.x through 9.0.7 PostgreSQL versions 9.1.x through 9.1.3
Description The issue allows remote authenticated users to cause a denial of service by adding the SECURITY DEFINER or SET attributes to a procedural language's call handler, resulting in a server crash.
Recommendations For PostgreSQL versions 8.3.x through 8.3.18, update to version 8.3.19 or later. For PostgreSQL versions 8.4.x through 8.4.11, update to version 8.4.12 or later. For PostgreSQL versions 9.0.x through 9.0.7, update to version 9.0.8 or later. For PostgreSQL versions 9.1.x through 9.1.3, update to version 9.1.4 or later.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CESA-2012_1037
CVE-2012-2655
DSA-2491-1
OPENSUSE-SU-2024:10030-1
OPENSUSE-SU-2024:10256-1
OPENSUSE-SU-2024:10273-1
RHSA-2012:1037
RHSA-2012_1037

Produtos afetados

Centos
Postgresql
Red Hat
Suse