backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-tclUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-pythonUpgrade postgresql-pl | Oct 16, 2024 | Oct 26, 2006 |
| Suse | — | Upgrade postgresql-libs-32bitUpgrade postgresqlUpgrade postgresql-plUpgrade postgresql-docsUpgrade postgresql-libs-x86Upgrade postgresql-libsUpgrade postgresql-libs-64bitUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-devel | Feb 17, 2015 | Oct 26, 2006 |
| Ubuntu | — | Upgrade postgresql-8.1 | Nov 8, 2024 | Oct 26, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub