Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql84-tclUpgrade postgresql-plUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql84-libsUpgrade postgresql84-pythonUpgrade postgresql-pythonUpgrade postgresql84-develUpgrade postgresql84-serverUpgrade postgresql84-pltclUpgrade postgresql84-plperlUpgrade postgresql84-docsUpgrade postgresql-testUpgrade postgresql-jdbcUpgrade postgresql84-testUpgrade postgresql84Upgrade postgresql-tclUpgrade postgresql-develUpgrade postgresql84-contribUpgrade postgresql84-plpythonUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-contrib | Dec 1, 2016 | Feb 1, 2011 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-base.Upgrade dev-db/postgresql.Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Feb 1, 2011 |
| Oracle_linux | — | Upgrade postgresql84-plperlUpgrade postgresql84-plpythonUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql84Upgrade postgresql84-docsUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-tclUpgrade postgresql84-pythonUpgrade postgresql84-pltclUpgrade postgresql84-testUpgrade postgresql-develUpgrade postgresql-plUpgrade postgresql84-tclUpgrade postgresql-pythonUpgrade postgresql84-serverUpgrade postgresql84-libsUpgrade postgresql84-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql84-contribUpgrade postgresql-contrib | Oct 16, 2024 | Feb 2, 2011 |
| Postgres | — | Upgrade to PostgreSQL version 8.4.7Upgrade to PostgreSQL version 9.0.3Upgrade to PostgreSQL version 8.2.20Upgrade to PostgreSQL version 8.3.14 | Feb 24, 2013 | Feb 1, 2011 |
| Suse | — | Upgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-libs-x86Upgrade postgresql-libs-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-contrib-8.3Upgrade postgresql-contrib-8.1Upgrade postgresql-contrib-8.4 | Nov 8, 2024 | Feb 2, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub