CVE-2010-4015

2011-02-0201:00:00

CWE-189

[email protected]

web.nvd.nist.gov

118

cve-2010-4015

buffer overflow

postgresql

intarray module

remote authenticated users

denial of service

arbitrary code execution

7.3 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.3%

JSON

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

CPENameOperatorVersion
postgresql:postgresqlpostgresqleq8.3.6
postgresql:postgresqlpostgresqleq8.3.3
postgresql:postgresqlpostgresqleq8.3.2
postgresql:postgresqlpostgresqleq8.3.12
postgresql:postgresqlpostgresqleq8.3.1
postgresql:postgresqlpostgresqleq8.3.5
postgresql:postgresqlpostgresqleq8.3.8
postgresql:postgresqlpostgresqleq8.3.7
postgresql:postgresqlpostgresqleq8.3.10
postgresql:postgresqlpostgresqleq8.3

CPE	Name	Operator	Version
postgresql:postgresql	postgresql	eq	8.3.6
postgresql:postgresql	postgresql	eq	8.3.3
postgresql:postgresql	postgresql	eq	8.3.2
postgresql:postgresql	postgresql	eq	8.3.12
postgresql:postgresql	postgresql	eq	8.3.1
postgresql:postgresql	postgresql	eq	8.3.5
postgresql:postgresql	postgresql	eq	8.3.8
postgresql:postgresql	postgresql	eq	8.3.7
postgresql:postgresql	postgresql	eq	8.3.10
postgresql:postgresql	postgresql	eq	8.3