The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade postgresqlUpgrade postgresql-server | Dec 10, 2025 | Apr 24, 2008 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Jan 9, 2008 |
| Oracle_linux | — | Upgrade postgresql-pythonUpgrade postgresql-libsUpgrade postgresql-plUpgrade postgresql-tclUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-devel | Oct 16, 2024 | Jan 9, 2008 |
| Suse | — | Upgrade postgresql94-contribUpgrade postgresqlUpgrade postgresql-libs-32bitUpgrade postgresql94-serverUpgrade postgresql91-docsUpgrade postgresql94Upgrade libecpg6Upgrade postgresql-libs-x86Upgrade postgresql-develUpgrade postgresql91-serverUpgrade postgresql-serverUpgrade libpq5-32bitUpgrade libpq5Upgrade postgresql-docsUpgrade postgresql91-contribUpgrade postgresql94-docsUpgrade postgresql94-develUpgrade postgresql-contribUpgrade postgresql91Upgrade postgresql-libs | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade postgresql-8.1Upgrade postgresql-pltcl-8.1Upgrade postgresql-pltcl-8.2Upgrade postgresql-8.2 | Nov 8, 2024 | Jan 9, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub