backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade postgresql-develUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-pythonUpgrade postgresql-plUpgrade postgresql-tcl | Oct 16, 2024 | Oct 26, 2006 |
| Suse | — | Upgrade postgresql-libs-64bitUpgrade postgresql-libs-x86Upgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-libs-32bitUpgrade postgresql-pl | Feb 17, 2015 | Oct 26, 2006 |
| Ubuntu | — | Upgrade postgresql-8.1 | Nov 8, 2024 | Oct 26, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub