Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-0442
HistoryFeb 02, 2010 - 6:30 p.m.

CVE-2010-0442

2010-02-0218:30:00
CWE-189
[email protected]
web.nvd.nist.gov

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

High

0.956 High

EPSS

Percentile

99.4%

JSON

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an β€œoverflow.”

Affected configurations

NVD
Node
postgresqlpostgresqlRange7.4–7.4.28
OR
postgresqlpostgresqlRange8.0–8.0.24
OR
postgresqlpostgresqlRange8.1–8.1.20
OR
postgresqlpostgresqlRange8.2–8.2.16
OR
postgresqlpostgresqlRange8.3–8.3.10
OR
postgresqlpostgresqlRange8.4–8.4.3

References

Related

freebsd 1
openvas 26
checkpoint_advisories 1
securityvulns 2
ubuntu 1
seebug 1
ubuntucve 1
prion 1
nessus 15
veracode 1
cvelist 1
cve 1
debian 1
redhat 3
centos 3
oraclelinux 3
osv 1
gentoo 1
freebsd
freebsd
postgresql -- bitsubstr overflow
2010-01-27 00:00:00
openvas
openvas
PostgreSQL 'bitsubstr' Buffer Overflow Vulnerability
2010-01-28 00:00:00
Ubuntu: Security Advisory (USN-933-1)
2010-04-30 00:00:00
FreeBSD Ports: postgresql-server
2010-03-30 00:00:00
checkpoint_advisories
checkpoint_advisories
PostgreSQL Bit Substring Buffer Overflow (CVE-2010-0442)
2010-09-28 00:00:00
securityvulns
securityvulns
PostgreSQL DoS
2010-04-29 00:00:00
[USN-933-1] PostgreSQL vulnerability
2010-04-29 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerability
2010-04-28 00:00:00
seebug
seebug
PostgreSQL bitsubstrε‡½ζ•°θΏœη¨‹ζΊ’ε‡ΊζΌζ΄ž
2010-01-29 00:00:00
ubuntucve
ubuntucve
CVE-2010-0442
2010-02-02 00:00:00
prion
prion
Buffer overflow
2010-02-02 18:30:00
nessus
nessus
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 : postgresql-8.1, postgresql-8.3, postgresql-8.4 vulnerability (USN-933-1)
2010-04-29 00:00:00
FreeBSD : postgresql -- bitsubstr overflow (e050119b-3856-11df-b2b2-002170daae37)
2010-03-26 00:00:00
Mandriva Linux Security Advisory : postgresql (MDVSA-2010:103)
2010-05-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:48:51
cvelist
cvelist
CVE-2010-0442
2010-02-02 18:00:00
cve
cve
CVE-2010-0442
2010-02-02 18:30:00
debian
debian
[SECURITY] [DSA 2051-1] New postgresql-8.3 packages fix several vulnerabilities
2010-05-24 16:00:11
redhat
redhat
(RHSA-2010:0427) Moderate: postgresql security update
2010-05-19 00:00:00
(RHSA-2010:0429) Moderate: postgresql security update
2010-05-19 00:00:00
(RHSA-2010:0428) Moderate: postgresql security update
2010-05-19 00:00:00
centos
centos
rh security update
2010-05-21 22:01:26
postgresql security update
2010-05-28 10:45:13
postgresql security update
2010-05-21 22:22:02
oraclelinux
oraclelinux
postgresql security update
2010-05-19 00:00:00
postgresql security update
2010-05-19 00:00:00
postgresql security update
2010-05-19 00:00:00
osv
osv
postgresql-8.3 - several
2010-05-24 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2011-10-25 00:00:00

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

High

0.956 High

EPSS

Percentile

99.4%

JSON
Related for NVD:CVE-2010-0442
freebsd1openvas26checkpoint_advisories1securityvulns2ubuntu1seebug1ubuntucve1prion1nessus15veracode1cvelist1cve1debian1redhat3centos3oraclelinux3osv1gentoo1