PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Feb 5, 2007 |
| Oracle_linux | — | Upgrade postgresql-tclUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-plUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-python | Oct 16, 2024 | Feb 6, 2007 |
| Suse | — | Upgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-serverUpgrade suse-releaseUpgrade postgresql-libs-x86Upgrade postgresql-libs-32bitUpgrade postgresql-plUpgrade postgresql-libs-64bitUpgrade postgresql-contribUpgrade postgresql-devel | Feb 17, 2015 | Feb 5, 2007 |
| Ubuntu | — | Upgrade postgresql-8.0Upgrade postgresql-7.4Upgrade postgresql-8.1 | Nov 8, 2024 | Feb 6, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub