PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Feb 12, 2013 |
| Centos_linux | — | Upgrade postgresql84-testUpgrade postgresqlUpgrade postgresql84-plperlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql84-docsUpgrade postgresql-serverUpgrade postgresql84Upgrade postgresql84-plpythonUpgrade postgresql84-pythonUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql84-contribUpgrade postgresql-contribUpgrade postgresql84-libsUpgrade postgresql84-pltclUpgrade postgresql84-develUpgrade postgresql-develUpgrade postgresql84-tclUpgrade postgresql84-serverUpgrade postgresql-pltcl | Dec 1, 2016 | Feb 12, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Feb 12, 2013 |
| Oracle_linux | — | Upgrade postgresql84-testUpgrade postgresql84Upgrade postgresql-docsUpgrade postgresql84-contribUpgrade postgresql84-develUpgrade postgresql-testUpgrade postgresql84-plperlUpgrade postgresql84-pltclUpgrade postgresqlUpgrade postgresql84-tclUpgrade postgresql-contribUpgrade postgresql84-docsUpgrade postgresql-plperlUpgrade postgresql84-pythonUpgrade postgresql-pltclUpgrade postgresql84-serverUpgrade postgresql-serverUpgrade postgresql84-libsUpgrade postgresql84-plpythonUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-devel | Oct 16, 2024 | Feb 13, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.0.12Upgrade to PostgreSQL version 9.2.3Upgrade to PostgreSQL version 8.3.23Upgrade to PostgreSQL version 8.4.16Upgrade to PostgreSQL version 9.1.8 | Feb 24, 2013 | Feb 12, 2013 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade postgresql91-develUpgrade libpq5-x86Upgrade postgresql91-devel-debuginfoUpgrade postgresql91-server-debuginfoUpgrade postgresql-docsUpgrade postgresql91-plpythonUpgrade postgresql91-serverUpgrade libecpg6-debuginfo-x86Upgrade postgresql91Upgrade postgresql91-plpython-debuginfoUpgrade postgresql91-pltclUpgrade postgresql91-libsUpgrade postgresql91-contrib-debuginfoUpgrade libecpg6-x86Upgrade postgresql91-libs-debugsourceUpgrade postgresql91-contribUpgrade postgresql91-plperl-debuginfoUpgrade postgresql91-debuginfoUpgrade postgresql-contribUpgrade libpq5-debuginfo-32bitUpgrade libpq5-32bitUpgrade postgresql91-devel-debuginfo-32bitUpgrade postgresqlUpgrade libecpg6Upgrade libpq5Upgrade libpq5-debuginfo-x86Upgrade postgresql91-debugsourceUpgrade libecpg6-debuginfo-32bitUpgrade postgresql91-devel-32bitUpgrade libecpg6-debuginfoUpgrade libpq5-debuginfoUpgrade postgresql91-devel-debuginfo-x86Upgrade postgresql-serverUpgrade postgresql91-plperlUpgrade postgresql91-docsUpgrade libecpg6-32bitUpgrade postgresql91-pltcl-debuginfo | Dec 12, 2013 | Feb 12, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-8.4Upgrade postgresql-9.1 | Nov 8, 2024 | Feb 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub