The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tclUpgrade tcl-htmlUpgrade tcl-devel | Dec 1, 2016 | Jan 9, 2008 |
| Freebsd | — | Upgrade postgresqlUpgrade postgresql-server | Dec 10, 2025 | Apr 24, 2008 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Jan 9, 2008 |
| Oracle_linux | — | Upgrade postgresql-testUpgrade postgresql-tclUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-pythonUpgrade tcl-develUpgrade postgresql-plUpgrade postgresql-serverUpgrade tcl-htmlUpgrade postgresql-contribUpgrade tclUpgrade postgresql-develUpgrade postgresql-docs | Oct 16, 2024 | Jan 9, 2008 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 7, 2008 |
| Suse | — | Upgrade postgresql-develUpgrade postgresql91-serverUpgrade libpq5-32bitUpgrade postgresql91-contribUpgrade postgresql91Upgrade postgresql94-contribUpgrade postgresql94-docsUpgrade postgresql-contribUpgrade postgresql94-develUpgrade postgresql91-docsUpgrade postgresql-libs-32bitUpgrade libecpg6Upgrade postgresql-libsUpgrade postgresql94-serverUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql94Upgrade postgresql-serverUpgrade libpq5Upgrade postgresql-libs-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade postgresql-pltcl-8.1Upgrade postgresql-8.1Upgrade postgresql-pltcl-8.2Upgrade postgresql-8.2 | Nov 8, 2024 | Jan 9, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub