PT-2011-1461 · Postgresql+1 · Postgresql+1

Geoff Keating · Published 2011-02-02 · Updated 2017-08-17 · CVE-2010-4015

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 8.2.x through 8.2.19 PostgreSQL versions 8.3.x through 8.3.13 PostgreSQL versions 8.4.x through 8.4.6 PostgreSQL versions 9.0.x through 9.0.2

Description The issue is related to a buffer overflow in the gettoken function in the intarray array module. This can be exploited by an authenticated database user to cause a denial of service or possibly execute arbitrary code by calling functions with certain parameters, specifically integers with a large number of digits.

Recommendations For PostgreSQL versions 8.2.x through 8.2.19, update to version 8.2.20 or later. For PostgreSQL versions 8.3.x through 8.3.13, update to version 8.3.14 or later. For PostgreSQL versions 8.4.x through 8.4.6, update to version 8.4.7 or later. For PostgreSQL versions 9.0.x through 9.0.2, update to version 9.0.3 or later.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2010-4015

DSA-2157-1

RHSA-2011:0197

RHSA-2011:0198

RHSA-2011_0197

RHSA-2011_0198

Affected Products

Postgresql

Red Hat

References · 38

• http://vupen.com/english/advisories/2011/0262 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053888.html · Vendor Advisory
• http://secunia.com/advisories/43144 · Vendor Advisory
• http://ubuntu.com/usn/USN-1058-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:021 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053817.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4015 · Security Note
• http://debian.org/security/2011/dsa-2157 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0198.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0197.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0197.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=134124585221119&w=2 · Vendor Advisory
• https://postgresql.org/support/security · Note
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 · Note