CVEvulnerability
CVE-2007-4769
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-189
Description
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.
Affected configurations
• postgresql postgresql 7.3
• postgresql postgresql 7.3.1
• postgresql postgresql 7.3.2
• postgresql postgresql 7.3.3
• postgresql postgresql 7.3.4
• postgresql postgresql 7.3.6
• postgresql postgresql 7.3.8
• postgresql postgresql 7.3.9
• postgresql postgresql 7.3.10
• postgresql postgresql 7.3.11
• postgresql postgresql 7.3.12
• postgresql postgresql 7.3.13
• postgresql postgresql 7.3.14
• postgresql postgresql 7.3.15
• postgresql postgresql 7.3.16
• postgresql postgresql 7.3.19
• postgresql postgresql 7.4
• postgresql postgresql 7.4.1
• postgresql postgresql 7.4.2
• postgresql postgresql 7.4.3
• postgresql postgresql 7.4.4
• postgresql postgresql 7.4.5
• postgresql postgresql 7.4.6
• postgresql postgresql 7.4.7
• postgresql postgresql 7.4.8
• postgresql postgresql 7.4.9
• postgresql postgresql 7.4.10
• postgresql postgresql 7.4.11
• postgresql postgresql 7.4.12
• postgresql postgresql 7.4.13
• postgresql postgresql 7.4.14
• postgresql postgresql 7.4.16
• postgresql postgresql 7.4.17
• postgresql postgresql 8.0
• postgresql postgresql 8.0.1
• postgresql postgresql 8.0.2
• postgresql postgresql 8.0.3
• postgresql postgresql 8.0.4
• postgresql postgresql 8.0.5
• postgresql postgresql 8.0.7
• postgresql postgresql 8.0.8
• postgresql postgresql 8.0.9
• postgresql postgresql 8.0.11
• postgresql postgresql 8.0.13
• postgresql postgresql 8.0.317
• postgresql postgresql 8.1.1
• postgresql postgresql 8.1.3
• postgresql postgresql 8.1.4
• postgresql postgresql 8.1.5
• postgresql postgresql 8.1.7
• postgresql postgresql 8.1.8
• postgresql postgresql 8.1.9
• postgresql postgresql 8.2
• postgresql postgresql 8.2.2
• postgresql postgresql 8.2.3
• postgresql postgresql 8.2.4
• tcl tk tcl tk (<= 8.4.16)
Related
Weakness · not in database (1)
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 h20000.www2.hp.com
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html lists.opensuse.org
- http://secunia.com/advisories/28359 Vendor Advisory
- http://secunia.com/advisories/28376 Vendor Advisory
- http://secunia.com/advisories/28437 Vendor Advisory
- http://secunia.com/advisories/28438 Vendor Advisory
- http://secunia.com/advisories/28454 Vendor Advisory
- http://secunia.com/advisories/28455 Vendor Advisory
- http://secunia.com/advisories/28464 Vendor Advisory
- http://secunia.com/advisories/28477 secunia.com
- http://secunia.com/advisories/28479 Vendor Advisory
- http://secunia.com/advisories/28679 Vendor Advisory
- http://secunia.com/advisories/28698 Vendor Advisory
- http://secunia.com/advisories/29638 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200801-15.xml security.gentoo.org
- http://securitytracker.com/id?1019157 securitytracker.com
- http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894 sourceforge.net
- http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894 sourceforge.net
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1 sunsolve.sun.com
- http://www.debian.org/security/2008/dsa-1460 www.debian.org
- http://www.debian.org/security/2008/dsa-1463 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 www.mandriva.com
- http://www.postgresql.org/about/news.905 www.postgresql.org
- http://www.redhat.com/support/errata/RHSA-2008-0038.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0040.html www.redhat.com
- http://www.securityfocus.com/archive/1/485864/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/486407/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27163 Patch
- http://www.vupen.com/english/advisories/2008/0061 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0109 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/1071/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39499 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1768 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9804 oval.cisecurity.org
- https://usn.ubuntu.com/568-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html www.redhat.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 h20000.www2.hp.com
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html lists.opensuse.org
- http://secunia.com/advisories/28359 Vendor Advisory
- http://secunia.com/advisories/28376 Vendor Advisory
- http://secunia.com/advisories/28437 Vendor Advisory
- http://secunia.com/advisories/28438 Vendor Advisory
- http://secunia.com/advisories/28454 Vendor Advisory
- http://secunia.com/advisories/28455 Vendor Advisory
- http://secunia.com/advisories/28464 Vendor Advisory
- http://secunia.com/advisories/28477 secunia.com
- http://secunia.com/advisories/28479 Vendor Advisory
- http://secunia.com/advisories/28679 Vendor Advisory
- http://secunia.com/advisories/28698 Vendor Advisory
- http://secunia.com/advisories/29638 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200801-15.xml security.gentoo.org
- http://securitytracker.com/id?1019157 securitytracker.com
- http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894 sourceforge.net
- http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894 sourceforge.net
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1 sunsolve.sun.com
- http://www.debian.org/security/2008/dsa-1460 www.debian.org
- http://www.debian.org/security/2008/dsa-1463 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 www.mandriva.com
- http://www.postgresql.org/about/news.905 www.postgresql.org
- http://www.redhat.com/support/errata/RHSA-2008-0038.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0040.html www.redhat.com
- http://www.securityfocus.com/archive/1/485864/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/486407/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27163 Patch
- http://www.vupen.com/english/advisories/2008/0061 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0109 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/1071/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39499 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1768 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9804 oval.cisecurity.org
- https://usn.ubuntu.com/568-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html www.redhat.com