Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0255
HistoryFeb 07, 2013 - 12:00 a.m.

CVE-2013-0255

2013-02-0700:00:00
ubuntu.com
ubuntu.com
8

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.016 Low

EPSS

Percentile

87.4%

PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12,
8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the
enum_recv function in backend/utils/adt/enum.c, which causes it to be
invoked with incorrect arguments and allows remote authenticated users to
cause a denial of service (server crash) or read sensitive process memory
via a crafted SQL command, which triggers an array index error and an
out-of-bounds read.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchpostgresql-8.3< 8.3.23-0ubuntu8.04UNKNOWN
ubuntu10.04noarchpostgresql-8.4< 8.4.16-0ubuntu10.04UNKNOWN
ubuntu12.04noarchpostgresql-8.4< 8.4.16-0ubuntu12.04UNKNOWN
ubuntu11.10noarchpostgresql-9.1< 9.1.8-0ubuntu11.10UNKNOWN
ubuntu12.04noarchpostgresql-9.1< 9.1.8-0ubuntu12.04UNKNOWN
ubuntu12.10noarchpostgresql-9.1< 9.1.8-0ubuntu12.10UNKNOWN

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.016 Low

EPSS

Percentile

87.4%