Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20170531-01-GAUSSDB
HistoryMay 31, 2017 - 12:00 a.m.

Security Advisory - Buffer Overflow Vulnerability in The GaussDB

2017-05-3100:00:00
Huawei Technologies
www.huawei.com
12

0.211 Low

EPSS

Percentile

96.4%

There is a buffer overflow vulnerability in the handling code for regular expressions on GaussDB. An authenticated, remote attacker could use a specially crafted regular expression to cause GaussDB to crash or possibly execute arbitrary code. (Vulnerability ID: HWPSIRT-2017-05046)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-0773.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170531-01-gaussdb-en