Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-0063
HistoryFeb 21, 2014 - 12:00 a.m.

CVE-2014-0063

2014-02-2100:00:00
ubuntu.com
ubuntu.com
12

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.927 High

EPSS

Percentile

99.0%

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x
before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before
9.3.3 allow remote authenticated users to cause a denial of service (crash)
or possibly execute arbitrary code via vectors related to an incorrect
MAXDATELEN constant and datetime values involving (1) intervals, (2)
timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchpostgresql-8.4< 8.4.20-0ubuntu010.04UNKNOWN
ubuntu12.04noarchpostgresql-8.4< 8.4.22-0ubuntu0.12.04UNKNOWN
ubuntu12.04noarchpostgresql-9.1< 9.1.12-0ubuntu0.12.04UNKNOWN
ubuntu12.10noarchpostgresql-9.1< 9.1.12-0ubuntu0.12.10UNKNOWN
ubuntu13.10noarchpostgresql-9.1< 9.1.12-0ubuntu0.13.10UNKNOWN
ubuntu14.04noarchpostgresql-9.1< 9.1.12-1UNKNOWN
ubuntu14.04noarchpostgresql-9.3< 9.3.3-1UNKNOWN

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.927 High

EPSS

Percentile

99.0%