CVEvulnerability
CVE-2010-4015
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-02-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
Affected configurations
• postgresql postgresql 8.3
• postgresql postgresql 8.3.1
• postgresql postgresql 8.3.2
• postgresql postgresql 8.3.3
• postgresql postgresql 8.3.4
• postgresql postgresql 8.3.5
• postgresql postgresql 8.3.6
• postgresql postgresql 8.3.7
• postgresql postgresql 8.3.8
• postgresql postgresql 8.3.9
• postgresql postgresql 8.3.10
• postgresql postgresql 8.3.11
• postgresql postgresql 8.3.12
• postgresql postgresql 8.3.13
• postgresql postgresql 9.0
• postgresql postgresql 9.0.1
• postgresql postgresql 9.0.2
• postgresql postgresql 8.4
• postgresql postgresql 8.4.1
• postgresql postgresql 8.4.2
• postgresql postgresql 8.4.3
• postgresql postgresql 8.4.4
• postgresql postgresql 8.4.5
• postgresql postgresql 8.4.6
• postgresql postgresql 8.2
• postgresql postgresql 8.2.1
• postgresql postgresql 8.2.2
• postgresql postgresql 8.2.3
• postgresql postgresql 8.2.4
• postgresql postgresql 8.2.5
• postgresql postgresql 8.2.6
• postgresql postgresql 8.2.7
• postgresql postgresql 8.2.8
• postgresql postgresql 8.2.9
• postgresql postgresql 8.2.10
• postgresql postgresql 8.2.11
• postgresql postgresql 8.2.12
• postgresql postgresql 8.2.13
• postgresql postgresql 8.2.14
• postgresql postgresql 8.2.15
• postgresql postgresql 8.2.16
• postgresql postgresql 8.2.17
• postgresql postgresql 8.2.18
• postgresql postgresql 8.2.19
Related
Weakness · not in database (1)
References
- http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commitdiff%3Bh=7ccb6dc2d3e266a551827bb99179708580f72431 git.postgresql.org
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053817.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053888.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=134124585221119&w=2 marc.info
- http://osvdb.org/70740 osvdb.org
- http://secunia.com/advisories/43144 Vendor Advisory
- http://secunia.com/advisories/43154 secunia.com
- http://secunia.com/advisories/43155 secunia.com
- http://secunia.com/advisories/43187 secunia.com
- http://secunia.com/advisories/43188 secunia.com
- http://secunia.com/advisories/43240 secunia.com
- http://www.debian.org/security/2011/dsa-2157 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:021 www.mandriva.com
- http://www.postgresql.org/about/news.1289 www.postgresql.org
- http://www.postgresql.org/support/security www.postgresql.org
- http://www.redhat.com/support/errata/RHSA-2011-0197.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0198.html www.redhat.com
- http://www.securityfocus.com/bid/46084 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1058-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0262 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0278 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0283 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0287 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0299 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0303 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0349 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65060 exchange.xforce.ibmcloud.com
- http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commitdiff%3Bh=7ccb6dc2d3e266a551827bb99179708580f72431 git.postgresql.org
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053817.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053888.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=134124585221119&w=2 marc.info
- http://osvdb.org/70740 osvdb.org
- http://secunia.com/advisories/43144 Vendor Advisory
- http://secunia.com/advisories/43154 secunia.com
- http://secunia.com/advisories/43155 secunia.com
- http://secunia.com/advisories/43187 secunia.com
- http://secunia.com/advisories/43188 secunia.com
- http://secunia.com/advisories/43240 secunia.com
- http://www.debian.org/security/2011/dsa-2157 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:021 www.mandriva.com
- http://www.postgresql.org/about/news.1289 www.postgresql.org
- http://www.postgresql.org/support/security www.postgresql.org
- http://www.redhat.com/support/errata/RHSA-2011-0197.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2011-0198.html www.redhat.com
- http://www.securityfocus.com/bid/46084 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1058-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0262 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0278 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0283 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0287 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0299 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0303 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0349 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65060 exchange.xforce.ibmcloud.com