Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-6067
HistoryJan 09, 2008 - 9:46 p.m.

CVE-2007-6067

2008-01-0921:46:00
CWE-189
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

5.8 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.7%

JSON

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted “complex” regular expression with doubly-nested states.

Affected configurations

NVD
Node
postgresqlpostgresqlMatch7.3
OR
postgresqlpostgresqlMatch7.3.1
OR
postgresqlpostgresqlMatch7.3.2
OR
postgresqlpostgresqlMatch7.3.3
OR
postgresqlpostgresqlMatch7.3.4
OR
postgresqlpostgresqlMatch7.3.6
OR
postgresqlpostgresqlMatch7.3.8
OR
postgresqlpostgresqlMatch7.3.9
OR
postgresqlpostgresqlMatch7.3.10
OR
postgresqlpostgresqlMatch7.3.11
OR
postgresqlpostgresqlMatch7.3.12
OR
postgresqlpostgresqlMatch7.3.13
OR
postgresqlpostgresqlMatch7.3.14
OR
postgresqlpostgresqlMatch7.3.15
OR
postgresqlpostgresqlMatch7.3.16
OR
postgresqlpostgresqlMatch7.3.19
OR
postgresqlpostgresqlMatch7.4
OR
postgresqlpostgresqlMatch7.4.1
OR
postgresqlpostgresqlMatch7.4.2
OR
postgresqlpostgresqlMatch7.4.3
OR
postgresqlpostgresqlMatch7.4.4
OR
postgresqlpostgresqlMatch7.4.5
OR
postgresqlpostgresqlMatch7.4.6
OR
postgresqlpostgresqlMatch7.4.7
OR
postgresqlpostgresqlMatch7.4.8
OR
postgresqlpostgresqlMatch7.4.9
OR
postgresqlpostgresqlMatch7.4.10
OR
postgresqlpostgresqlMatch7.4.11
OR
postgresqlpostgresqlMatch7.4.12
OR
postgresqlpostgresqlMatch7.4.13
OR
postgresqlpostgresqlMatch7.4.14
OR
postgresqlpostgresqlMatch7.4.16
OR
postgresqlpostgresqlMatch7.4.17
OR
postgresqlpostgresqlMatch8.0
OR
postgresqlpostgresqlMatch8.0.1
OR
postgresqlpostgresqlMatch8.0.2
OR
postgresqlpostgresqlMatch8.0.3
OR
postgresqlpostgresqlMatch8.0.4
OR
postgresqlpostgresqlMatch8.0.5
OR
postgresqlpostgresqlMatch8.0.7
OR
postgresqlpostgresqlMatch8.0.8
OR
postgresqlpostgresqlMatch8.0.9
OR
postgresqlpostgresqlMatch8.0.11
OR
postgresqlpostgresqlMatch8.0.13
OR
postgresqlpostgresqlMatch8.0.317
OR
postgresqlpostgresqlMatch8.1.1
OR
postgresqlpostgresqlMatch8.1.3
OR
postgresqlpostgresqlMatch8.1.4
OR
postgresqlpostgresqlMatch8.1.5
OR
postgresqlpostgresqlMatch8.1.7
OR
postgresqlpostgresqlMatch8.1.8
OR
postgresqlpostgresqlMatch8.1.9
OR
postgresqlpostgresqlMatch8.2
OR
postgresqlpostgresqlMatch8.2.2
OR
postgresqlpostgresqlMatch8.2.3
OR
postgresqlpostgresqlMatch8.2.4
OR
tcl_tktcl_tkRange≤8.4.16

References

Related

cvelist 1
cve 1
ubuntucve 1
prion 1
nessus 21
oraclelinux 2
centos 2
openvas 35
redhat 3
veracode 1
fedora 2
freebsd 1
suse 1
securityvulns 2
gentoo 1
debian 2
osv 2
ubuntu 1
cvelist
cvelist
CVE-2007-6067
2008-01-09 21:00:00
cve
cve
CVE-2007-6067
2008-01-09 21:46:00
ubuntucve
ubuntucve
CVE-2007-6067
2008-01-09 00:00:00
prion
prion
Design/Logic Flaw
2008-01-09 21:46:00
nessus
nessus
Oracle Linux 5 : tcl (ELSA-2013-0122)
2013-07-12 00:00:00
Scientific Linux Security Update : tcl on SL5.x i386/x86_64 (20130108)
2013-01-17 00:00:00
RHEL 4 : tcl (Unpatched Vulnerability)
2024-06-03 00:00:00
oraclelinux
oraclelinux
tcl security and bug fix update
2013-01-11 00:00:00
Moderate: postgresql security update
2008-01-11 00:00:00
centos
centos
tcl security update
2013-01-09 20:44:22
postgresql security update
2008-01-11 15:27:05
openvas
openvas
CentOS Update for tcl CESA-2013:0122 centos5
2013-01-21 00:00:00
RedHat Update for tcl RHSA-2013:0122-01
2013-01-11 00:00:00
Oracle: Security Advisory (ELSA-2013-0122)
2015-10-06 00:00:00
redhat
redhat
(RHSA-2013:0122) Moderate: tcl security and bug fix update
2013-01-08 00:00:00
(RHSA-2008:0040) Moderate: postgresql security update
2008-02-01 00:00:00
(RHSA-2008:0038) Moderate: postgresql security update
2008-01-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:45:32
fedora
fedora
[SECURITY] Fedora 8 Update: postgresql-8.2.6-1.fc8
2008-01-11 22:14:38
[SECURITY] Fedora 7 Update: postgresql-8.2.6-1.fc7
2008-01-11 22:24:42
freebsd
freebsd
postgresql -- multiple vulnerabilities
2008-01-06 00:00:00
suse
suse
remote code execution in postgresql
2008-02-06 10:24:49
securityvulns
securityvulns
PostgreSQL database server multiple security vulnerabilities
2008-01-08 00:00:00
PostgreSQL 2007-01-07 Cumulative Security Release
2008-01-08 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2008-01-29 00:00:00
debian
debian
[SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities
2008-01-14 18:51:52
[SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities
2008-01-13 15:45:01
osv
osv
postgresql-8.1 - several
2008-01-13 00:00:00
postgresql-7.4 - several
2008-01-14 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2008-01-14 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

5.8 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.7%

JSON
Related for NVD:CVE-2007-6067
cvelist1cve1ubuntucve1prion1nessus21oraclelinux2centos2openvas35redhat3veracode1fedora2freebsd1suse1securityvulns2gentoo1debian2osv2ubuntu1