Buffer overflow

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service daemon crash or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT...

CVE-2010-0442

CVE-2010-0442 affects PostgreSQL bit-string handling: the bitsubstr function in backend/utils/adt/varbit.c on PostgreSQL versions 8.0.23, 8.1.11, and 8.3.8 can be triggered by a negative integer in the third argument of a bit-string substring call, leading to a denial of service (daemon crash) an...