The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tcl-htmlUpgrade tclUpgrade tcl-devel | Dec 1, 2016 | Jan 9, 2008 |
| Freebsd | — | Upgrade postgresqlUpgrade postgresql-server | Dec 10, 2025 | Apr 24, 2008 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Jan 9, 2008 |
| Oracle_linux | — | Upgrade postgresql-testUpgrade tcl-develUpgrade postgresql-tclUpgrade postgresql-docsUpgrade tcl-htmlUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-plUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresqlUpgrade tclUpgrade postgresql-python | Oct 16, 2024 | Jan 9, 2008 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 7, 2008 |
| Suse | — | Upgrade libecpg6Upgrade postgresql94-develUpgrade postgresql94-docsUpgrade postgresql94-contribUpgrade postgresql94Upgrade postgresql96-docsUpgrade postgresql-contribUpgrade postgresql96-contribUpgrade libpq5-32bitUpgrade postgresql10-pltclUpgrade postgresql91-docsUpgrade postgresql10-docsUpgrade postgresql96-serverUpgrade postgresql-libs-32bitUpgrade postgresql-develUpgrade postgresql93-docsUpgrade postgresql96Upgrade postgresql-libs-x86Upgrade postgresql-serverUpgrade postgresql10-serverUpgrade postgresql91Upgrade postgresql93-develUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql10Upgrade postgresql10-plpythonUpgrade postgresql10-develUpgrade postgresql94-serverUpgrade libpq5Upgrade postgresql93Upgrade postgresql91-serverUpgrade postgresql10-plperlUpgrade postgresql93-contribUpgrade postgresql10-contribUpgrade postgresql91-contribUpgrade postgresql93-serverUpgrade postgresql-libsUpgrade postgresql96-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade postgresql-8.2Upgrade postgresql-8.1Upgrade postgresql-pltcl-8.2Upgrade postgresql-pltcl-8.1 | Nov 8, 2024 | Jan 9, 2008 |
| Vmsa 2008 0009 | — | Apply ESX350-200805506-SG. | Nov 19, 2010 | Jan 9, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub