CVEvulnerability

CVE-2007-6067

6.8 MEDIUM Published 2008-01-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-01-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
Weaknesses
CWE-189

Description

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.

Affected configurations

• postgresql postgresql 7.3 • postgresql postgresql 7.3.1 • postgresql postgresql 7.3.2 • postgresql postgresql 7.3.3 • postgresql postgresql 7.3.4 • postgresql postgresql 7.3.6 • postgresql postgresql 7.3.8 • postgresql postgresql 7.3.9 • postgresql postgresql 7.3.10 • postgresql postgresql 7.3.11 • postgresql postgresql 7.3.12 • postgresql postgresql 7.3.13 • postgresql postgresql 7.3.14 • postgresql postgresql 7.3.15 • postgresql postgresql 7.3.16 • postgresql postgresql 7.3.19 • postgresql postgresql 7.4 • postgresql postgresql 7.4.1 • postgresql postgresql 7.4.2 • postgresql postgresql 7.4.3 • postgresql postgresql 7.4.4 • postgresql postgresql 7.4.5 • postgresql postgresql 7.4.6 • postgresql postgresql 7.4.7 • postgresql postgresql 7.4.8 • postgresql postgresql 7.4.9 • postgresql postgresql 7.4.10 • postgresql postgresql 7.4.11 • postgresql postgresql 7.4.12 • postgresql postgresql 7.4.13 • postgresql postgresql 7.4.14 • postgresql postgresql 7.4.16 • postgresql postgresql 7.4.17 • postgresql postgresql 8.0 • postgresql postgresql 8.0.1 • postgresql postgresql 8.0.2 • postgresql postgresql 8.0.3 • postgresql postgresql 8.0.4 • postgresql postgresql 8.0.5 • postgresql postgresql 8.0.7 • postgresql postgresql 8.0.8 • postgresql postgresql 8.0.9 • postgresql postgresql 8.0.11 • postgresql postgresql 8.0.13 • postgresql postgresql 8.0.317 • postgresql postgresql 8.1.1 • postgresql postgresql 8.1.3 • postgresql postgresql 8.1.4 • postgresql postgresql 8.1.5 • postgresql postgresql 8.1.7 • postgresql postgresql 8.1.8 • postgresql postgresql 8.1.9 • postgresql postgresql 8.2 • postgresql postgresql 8.2.2 • postgresql postgresql 8.2.3 • postgresql postgresql 8.2.4 • tcl tk tcl tk (<= 8.4.16)

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-637 Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism') weakness

References