CVEvulnerability
CVE-2006-5540
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-10-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Description
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
Affected configurations
• postgresql postgresql 6.3.2
• postgresql postgresql 6.5.3
• postgresql postgresql 7.0.2
• postgresql postgresql 7.0.3
• postgresql postgresql 7.1
• postgresql postgresql 7.1.1
• postgresql postgresql 7.1.2
• postgresql postgresql 7.1.3
• postgresql postgresql 7.2
• postgresql postgresql 7.2.1
• postgresql postgresql 7.2.2
• postgresql postgresql 7.2.3
• postgresql postgresql 7.2.4
• postgresql postgresql 7.2.7
• postgresql postgresql 7.3
• postgresql postgresql 7.3.1
• postgresql postgresql 7.3.2
• postgresql postgresql 7.3.3
• postgresql postgresql 7.3.4
• postgresql postgresql 7.3.6
• postgresql postgresql 7.3.8
• postgresql postgresql 7.3.9
• postgresql postgresql 7.3.10
• postgresql postgresql 7.3.11
• postgresql postgresql 7.3.12
• postgresql postgresql 7.3.13
• postgresql postgresql 7.3.14
• postgresql postgresql 7.3.15
• postgresql postgresql 7.4
• postgresql postgresql 7.4.1
• postgresql postgresql 7.4.2
• postgresql postgresql 7.4.3
• postgresql postgresql 7.4.4
• postgresql postgresql 7.4.5
• postgresql postgresql 7.4.6
• postgresql postgresql 7.4.7
• postgresql postgresql 7.4.8
• postgresql postgresql 7.4.9
• postgresql postgresql 7.4.10
• postgresql postgresql 7.4.11
• postgresql postgresql 7.4.12
• postgresql postgresql 7.4.13
• postgresql postgresql 8.0
• postgresql postgresql 8.0.1
• postgresql postgresql 8.0.2
• postgresql postgresql 8.0.3
• postgresql postgresql 8.0.4
• postgresql postgresql 8.0.5
• postgresql postgresql 8.0.6
• postgresql postgresql 8.0.7
• postgresql postgresql 8.0.8
• postgresql postgresql 8.1
• postgresql postgresql 8.1.1
• postgresql postgresql 8.1.2
• postgresql postgresql 8.1.3
• postgresql postgresql 8.1.4
References
- ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc patches.sgi.com
- http://projects.commandprompt.com/public/pgsql/changeset/25504 projects.commandprompt.com
- http://secunia.com/advisories/22562 Patch, Vendor Advisory
- http://secunia.com/advisories/22584 Patch, Vendor Advisory
- http://secunia.com/advisories/22606 secunia.com
- http://secunia.com/advisories/22636 secunia.com
- http://secunia.com/advisories/23048 secunia.com
- http://secunia.com/advisories/23132 secunia.com
- http://secunia.com/advisories/24094 secunia.com
- http://secunia.com/advisories/24284 secunia.com
- http://secunia.com/advisories/24577 secunia.com
- http://securitytracker.com/id?1017115 securitytracker.com
- http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm support.avaya.com
- http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html support.novell.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:194 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2006_27_sr.html www.novell.com
- http://www.postgresql.org/about/news.664 www.postgresql.org
- http://www.redhat.com/support/errata/RHSA-2007-0064.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0067.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0068.html www.redhat.com
- http://www.securityfocus.com/bid/20717 Patch
- http://www.trustix.org/errata/2006/0059/ www.trustix.org
- http://www.ubuntu.com/usn/usn-369-1 www.ubuntu.com
- http://www.ubuntu.com/usn/usn-369-2 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/4182 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc patches.sgi.com
- http://projects.commandprompt.com/public/pgsql/changeset/25504 projects.commandprompt.com
- http://secunia.com/advisories/22562 Patch, Vendor Advisory
- http://secunia.com/advisories/22584 Patch, Vendor Advisory
- http://secunia.com/advisories/22606 secunia.com
- http://secunia.com/advisories/22636 secunia.com
- http://secunia.com/advisories/23048 secunia.com
- http://secunia.com/advisories/23132 secunia.com
- http://secunia.com/advisories/24094 secunia.com
- http://secunia.com/advisories/24284 secunia.com
- http://secunia.com/advisories/24577 secunia.com
- http://securitytracker.com/id?1017115 securitytracker.com
- http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm support.avaya.com
- http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html support.novell.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:194 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2006_27_sr.html www.novell.com
- http://www.postgresql.org/about/news.664 www.postgresql.org
- http://www.redhat.com/support/errata/RHSA-2007-0064.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0067.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0068.html www.redhat.com
- http://www.securityfocus.com/bid/20717 Patch
- http://www.trustix.org/errata/2006/0059/ www.trustix.org
- http://www.ubuntu.com/usn/usn-369-1 www.ubuntu.com
- http://www.ubuntu.com/usn/usn-369-2 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/4182 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425 oval.cisecurity.org