Lucene search

K
cve[email protected]CVE-2012-2655
HistoryJul 18, 2012 - 11:55 p.m.

CVE-2012-2655

2012-07-1823:55:01
CWE-399
web.nvd.nist.gov
139
postgresql
cve-2012-2655
security vulnerability
remote authenticated users
denial of service
nvd

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6

Confidence

High

EPSS

0.012

Percentile

85.3%

PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language’s call handler.

Affected configurations

NVD
Node
postgresqlpostgresqlMatch8.3
OR
postgresqlpostgresqlMatch8.3.1
OR
postgresqlpostgresqlMatch8.3.2
OR
postgresqlpostgresqlMatch8.3.3
OR
postgresqlpostgresqlMatch8.3.4
OR
postgresqlpostgresqlMatch8.3.5
OR
postgresqlpostgresqlMatch8.3.6
OR
postgresqlpostgresqlMatch8.3.7
OR
postgresqlpostgresqlMatch8.3.8
OR
postgresqlpostgresqlMatch8.3.9
OR
postgresqlpostgresqlMatch8.3.10
OR
postgresqlpostgresqlMatch8.3.11
OR
postgresqlpostgresqlMatch8.3.12
OR
postgresqlpostgresqlMatch8.3.13
OR
postgresqlpostgresqlMatch8.3.14
OR
postgresqlpostgresqlMatch8.3.15
OR
postgresqlpostgresqlMatch8.3.16
OR
postgresqlpostgresqlMatch8.3.17
OR
postgresqlpostgresqlMatch8.3.18
Node
postgresqlpostgresqlMatch8.4
OR
postgresqlpostgresqlMatch8.4.1
OR
postgresqlpostgresqlMatch8.4.2
OR
postgresqlpostgresqlMatch8.4.3
OR
postgresqlpostgresqlMatch8.4.4
OR
postgresqlpostgresqlMatch8.4.5
OR
postgresqlpostgresqlMatch8.4.6
OR
postgresqlpostgresqlMatch8.4.7
OR
postgresqlpostgresqlMatch8.4.8
OR
postgresqlpostgresqlMatch8.4.9
OR
postgresqlpostgresqlMatch8.4.10
OR
postgresqlpostgresqlMatch8.4.11
Node
postgresqlpostgresqlMatch9.0
OR
postgresqlpostgresqlMatch9.0.1
OR
postgresqlpostgresqlMatch9.0.2
OR
postgresqlpostgresqlMatch9.0.3
OR
postgresqlpostgresqlMatch9.0.4
OR
postgresqlpostgresqlMatch9.0.5
OR
postgresqlpostgresqlMatch9.0.6
OR
postgresqlpostgresqlMatch9.0.7
Node
postgresqlpostgresqlMatch9.1
OR
postgresqlpostgresqlMatch9.1.1
OR
postgresqlpostgresqlMatch9.1.2
OR
postgresqlpostgresqlMatch9.1.3
VendorProductVersionCPE
postgresqlpostgresql8.3.3cpe:/a:postgresql:postgresql:8.3.3:::
postgresqlpostgresql8.3.4cpe:/a:postgresql:postgresql:8.3.4:::
postgresqlpostgresql8.3.1cpe:/a:postgresql:postgresql:8.3.1:::
postgresqlpostgresql8.3.18cpe:/a:postgresql:postgresql:8.3.18:::
postgresqlpostgresql8.3.6cpe:/a:postgresql:postgresql:8.3.6:::
postgresqlpostgresql8.3cpe:/a:postgresql:postgresql:8.3:::
postgresqlpostgresql8.3.5cpe:/a:postgresql:postgresql:8.3.5:::
postgresqlpostgresql8.3.9cpe:/a:postgresql:postgresql:8.3.9:::
postgresqlpostgresql8.3.16cpe:/a:postgresql:postgresql:8.3.16:::
postgresqlpostgresql8.3.8cpe:/a:postgresql:postgresql:8.3.8:::
Rows per page:
1-10 of 191

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6

Confidence

High

EPSS

0.012

Percentile

85.3%