CVEvulnerability
CVE-2014-0064
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, which trigger a buffer overflow. NOTE: this identifier has been SPLIT due to different affected versions; use CVE-2014-2669 for the hstore vector.
Affected configurations
• postgresql postgresql (<= 8.4.19)
• postgresql postgresql 8.4.1
• postgresql postgresql 8.4.2
• postgresql postgresql 8.4.3
• postgresql postgresql 8.4.4
• postgresql postgresql 8.4.5
• postgresql postgresql 8.4.6
• postgresql postgresql 8.4.7
• postgresql postgresql 8.4.8
• postgresql postgresql 8.4.9
• postgresql postgresql 8.4.10
• postgresql postgresql 8.4.11
• postgresql postgresql 8.4.12
• postgresql postgresql 8.4.13
• postgresql postgresql 8.4.14
• postgresql postgresql 8.4.15
• postgresql postgresql 8.4.16
• postgresql postgresql 8.4.17
• postgresql postgresql 8.4.18
• postgresql postgresql 9.0
• postgresql postgresql 9.0.1
• postgresql postgresql 9.0.2
• postgresql postgresql 9.0.3
• postgresql postgresql 9.0.4
• postgresql postgresql 9.0.5
• postgresql postgresql 9.0.6
• postgresql postgresql 9.0.7
• postgresql postgresql 9.0.8
• postgresql postgresql 9.0.9
• postgresql postgresql 9.0.10
• postgresql postgresql 9.0.11
• postgresql postgresql 9.0.12
• postgresql postgresql 9.0.13
• postgresql postgresql 9.0.14
• postgresql postgresql 9.0.15
• postgresql postgresql 9.1
• postgresql postgresql 9.1.1
• postgresql postgresql 9.1.2
• postgresql postgresql 9.1.3
• postgresql postgresql 9.1.4
• postgresql postgresql 9.1.5
• postgresql postgresql 9.1.6
• postgresql postgresql 9.1.7
• postgresql postgresql 9.1.8
• postgresql postgresql 9.1.9
• postgresql postgresql 9.1.10
• postgresql postgresql 9.1.11
• postgresql postgresql 9.2
• postgresql postgresql 9.2.1
• postgresql postgresql 9.2.2
• postgresql postgresql 9.2.3
• postgresql postgresql 9.2.4
• postgresql postgresql 9.2.5
• postgresql postgresql 9.2.6
• postgresql postgresql 9.3
• postgresql postgresql 9.3.1
• postgresql postgresql 9.3.2
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html archives.neohapsis.com
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2014-0211.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0221.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0249.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0469.html rhn.redhat.com
- http://secunia.com/advisories/61307 secunia.com
- http://support.apple.com/kb/HT6448 support.apple.com
- http://wiki.postgresql.org/wiki/20140220securityrelease wiki.postgresql.org
- http://www.debian.org/security/2014/dsa-2864 www.debian.org
- http://www.debian.org/security/2014/dsa-2865 www.debian.org
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html www.oracle.com
- http://www.postgresql.org/about/news/1506/ Vendor Advisory
- http://www.postgresql.org/support/security/ Vendor Advisory
- http://www.securityfocus.com/bid/65725 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2120-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1065230 bugzilla.redhat.com
- https://github.com/postgres/postgres/commit/31400a673325147e1205326008e32135a78b4d8a github.com
- https://support.apple.com/kb/HT6536 support.apple.com
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html archives.neohapsis.com
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2014-0211.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0221.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0249.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2014-0469.html rhn.redhat.com
- http://secunia.com/advisories/61307 secunia.com
- http://support.apple.com/kb/HT6448 support.apple.com
- http://wiki.postgresql.org/wiki/20140220securityrelease wiki.postgresql.org
- http://www.debian.org/security/2014/dsa-2864 www.debian.org
- http://www.debian.org/security/2014/dsa-2865 www.debian.org
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html www.oracle.com
- http://www.postgresql.org/about/news/1506/ Vendor Advisory
- http://www.postgresql.org/support/security/ Vendor Advisory
- http://www.securityfocus.com/bid/65725 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2120-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1065230 bugzilla.redhat.com
- https://github.com/postgres/postgres/commit/31400a673325147e1205326008e32135a78b4d8a github.com
- https://support.apple.com/kb/HT6536 support.apple.com