Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-0442
HistoryFeb 02, 2010 - 6:30 p.m.

CVE-2010-0442

2010-02-0218:30:00
CWE-189
[email protected]
web.nvd.nist.gov
61
postgresql
bitsubstr function
denial of service
vulnerability
cve-2010-0442
nvd

6.5 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.96 High

EPSS

Percentile

99.5%

JSON

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an β€œoverflow.”

References

Related

prion 1
checkpoint_advisories 1
securityvulns 2
ubuntu 1
openvas 26
freebsd 1
seebug 1
ubuntucve 1
nessus 15
veracode 1
debian 1
redhat 3
centos 3
oraclelinux 3
osv 1
gentoo 1
prion
prion
Buffer overflow
2010-02-02 18:30:00
checkpoint_advisories
checkpoint_advisories
PostgreSQL Bit Substring Buffer Overflow (CVE-2010-0442)
2010-09-28 00:00:00
securityvulns
securityvulns
PostgreSQL DoS
2010-04-29 00:00:00
[USN-933-1] PostgreSQL vulnerability
2010-04-29 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerability
2010-04-28 00:00:00
openvas
openvas
PostgreSQL 'bitsubstr' Buffer Overflow Vulnerability
2010-01-28 00:00:00
Ubuntu: Security Advisory (USN-933-1)
2010-04-30 00:00:00
Ubuntu Update for PostgreSQL vulnerability USN-933-1
2010-04-30 00:00:00
freebsd
freebsd
postgresql -- bitsubstr overflow
2010-01-27 00:00:00
seebug
seebug
PostgreSQL bitsubstrε‡½ζ•°θΏœη¨‹ζΊ’ε‡ΊζΌζ΄ž
2010-01-29 00:00:00
ubuntucve
ubuntucve
CVE-2010-0442
2010-02-02 00:00:00
nessus
nessus
FreeBSD : postgresql -- bitsubstr overflow (e050119b-3856-11df-b2b2-002170daae37)
2010-03-26 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 : postgresql-8.1, postgresql-8.3, postgresql-8.4 vulnerability (USN-933-1)
2010-04-29 00:00:00
Mandriva Linux Security Advisory : postgresql (MDVSA-2010:103)
2010-05-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:48:51
debian
debian
[SECURITY] [DSA 2051-1] New postgresql-8.3 packages fix several vulnerabilities
2010-05-24 16:00:34
redhat
redhat
(RHSA-2010:0427) Moderate: postgresql security update
2010-05-19 00:00:00
(RHSA-2010:0429) Moderate: postgresql security update
2010-05-19 00:00:00
(RHSA-2010:0428) Moderate: postgresql security update
2010-05-19 00:00:00
centos
centos
rh security update
2010-05-21 22:01:26
postgresql security update
2010-05-28 10:45:13
postgresql security update
2010-05-21 22:22:02
oraclelinux
oraclelinux
postgresql security update
2010-05-19 00:00:00
postgresql security update
2010-05-19 00:00:00
postgresql security update
2010-05-19 00:00:00
osv
osv
postgresql-8.3 - several
2010-05-24 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2011-10-25 00:00:00

6.5 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.96 High

EPSS

Percentile

99.5%

JSON
Related for CVE-2010-0442
prion1checkpoint_advisories1securityvulns2ubuntu1openvas26freebsd1seebug1ubuntucve1nessus15veracode1debian1redhat3centos3oraclelinux3osv1gentoo1