Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-2655
HistoryJun 05, 2012 - 12:00 a.m.

CVE-2012-2655

2012-06-0500:00:00
ubuntu.com
ubuntu.com
8

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

85.0%

PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8,
and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial
of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET
attributes to a procedural language’s call handler.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchpostgresql-8.3<Β 8.3.19-0ubuntu8.04UNKNOWN
ubuntu10.04noarchpostgresql-8.4<Β 8.4.12-0ubuntu10.04UNKNOWN
ubuntu11.04noarchpostgresql-8.4<Β 8.4.12-0ubuntu11.04UNKNOWN
ubuntu12.04noarchpostgresql-8.4<Β 8.4.17-0ubuntu12.04UNKNOWN
ubuntu11.10noarchpostgresql-9.1<Β 9.1.4-0ubuntu11.10UNKNOWN
ubuntu12.04noarchpostgresql-9.1<Β 9.1.4-0ubuntu12.04UNKNOWN

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

85.0%