Lucene search

K
postgresqlPostgreSQL Global Development GroupPOSTGRESQL:CVE-2012-2655
HistoryJul 18, 2012 - 11:55 p.m.

Vulnerability in core server (CVE-2012-2655)

2012-07-1823:55:00
PostgreSQL Global Development Group
www.postgresql.org
632

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

83.6%

SECURITY DEFINER and SET attributes on procedural call handlers are not ignored and can be used to crash the server

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

83.6%