backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade postgresql-develUpgrade postgresql-plUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-pythonUpgrade postgresql-tcl | Oct 16, 2024 | Oct 26, 2006 |
| Suse | — | Upgrade postgresql-libs-64bitUpgrade postgresql-libs-32bitUpgrade postgresql-libs-x86Upgrade postgresql-docsUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-plUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-contrib | Feb 17, 2015 | Oct 26, 2006 |
| Ubuntu | — | Upgrade postgresql-8.1 | Nov 8, 2024 | Oct 26, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub