The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tclUpgrade tcl-develUpgrade tcl-html | Dec 1, 2016 | Jan 9, 2008 |
| Freebsd | — | Upgrade postgresql-serverUpgrade postgresql | Dec 10, 2025 | Apr 24, 2008 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Jan 9, 2008 |
| Oracle_linux | — | Upgrade postgresql-contribUpgrade postgresql-develUpgrade tclUpgrade postgresql-docsUpgrade postgresql-plUpgrade postgresql-tclUpgrade tcl-htmlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pythonUpgrade tcl-develUpgrade postgresql-libsUpgrade postgresql | Oct 16, 2024 | Jan 9, 2008 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 7, 2008 |
| Suse | — | Upgrade postgresql94-serverUpgrade postgresql-serverUpgrade libpq5Upgrade libecpg6Upgrade postgresql-libs-x86Upgrade postgresql94Upgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-libs-32bitUpgrade postgresql91Upgrade postgresql94-develUpgrade postgresql94-docsUpgrade postgresql91-contribUpgrade postgresql91-docsUpgrade libpq5-32bitUpgrade postgresql-contribUpgrade postgresql91-serverUpgrade postgresql94-contrib | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade postgresql-pltcl-8.1Upgrade postgresql-pltcl-8.2Upgrade postgresql-8.1Upgrade postgresql-8.2 | Nov 8, 2024 | Jan 9, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub