PostgreSQL: Stack-based buffer overflow by processing certain tokens from SQL query string when intarray module enabled

Buffer overflow in the gettoken function in contrib/intarray/intbool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrar...

[SECURITY] [DSA-2157-1] PostgreSQL security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2157-1 [email protected] http://www.debian.org/security/ Florian Weimer February 03, 2011 http://www.debian.org/security/faq -...

Buffer overflow

Buffer overflow in the gettoken function in contrib/intarray/intbool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrar...

CVE-2010-4015

CVE-2010-4015 is a vulnerability in PostgreSQL’s intarray module: a buffer overflow in gettoken() (contrib/intarray/_int_bool.c) could be triggered by integers with a large number of digits. Affected products/versions include PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14,...

PT-2011-1461

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 8.2.x through 8.2.19 PostgreSQL versions 8.3.x through 8.3.13 PostgreSQL versions 8.4.x through 8.4.6 PostgreSQL versions 9.0.x through 9.0.2 Description The issue is related to a buffer overflow in the gettoken function in...

CVE-2010-4015

Buffer overflow in the gettoken function in contrib/intarray/intbool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrar...

CVE-2010-4015: Undefined Security Weakness

Buffer overflow in the gettoken function in contrib/intarray/intbool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrar...

Vulnerability in contrib module (CVE-2010-4015)

An authenticated database user can cause a buffer overrun by calling functions from the intarray optional module with certain parameters...

PostgreSQL 'intarray' Module 'gettoken()' Buffer Overflow Vulnerability

PostgreSQL is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue affects the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

CVE-2010-4015

Buffer overflow in the gettoken function in contrib/intarray/intbool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrar...