CVE-2014-2669

2014-03-3100:00:00

ubuntu.com

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.7%

JSON

Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL
9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x
before 9.3.3 allow remote authenticated users to have unspecified impact
via vectors related to the (1) hstore_recv, (2) hstore_from_arrays, and (3)
hstore_from_array functions in contrib/hstore/hstore_io.c; and the (4)
hstoreArrayToPairs function in contrib/hstore/hstore_op.c, which triggers a
buffer overflow. NOTE: this issue was SPLIT from CVE-2014-0064 because it
has a different set of affected versions.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchpostgresql-8.4< 8.4.20-0ubuntu010.04UNKNOWN
ubuntu12.04noarchpostgresql-8.4< 8.4.22-0ubuntu0.12.04UNKNOWN
ubuntu12.04noarchpostgresql-9.1< 9.1.12-0ubuntu0.12.04UNKNOWN
ubuntu12.10noarchpostgresql-9.1< 9.1.12-0ubuntu0.12.10UNKNOWN
ubuntu13.10noarchpostgresql-9.1< 9.1.12-0ubuntu0.13.10UNKNOWN
ubuntu14.04noarchpostgresql-9.1< 9.1.12-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	postgresql-8.4	< 8.4.20-0ubuntu010.04	UNKNOWN
ubuntu	12.04	noarch	postgresql-8.4	< 8.4.22-0ubuntu0.12.04	UNKNOWN
ubuntu	12.04	noarch	postgresql-9.1	< 9.1.12-0ubuntu0.12.04	UNKNOWN
ubuntu	12.10	noarch	postgresql-9.1	< 9.1.12-0ubuntu0.12.10	UNKNOWN
ubuntu	13.10	noarch	postgresql-9.1	< 9.1.12-0ubuntu0.13.10	UNKNOWN
ubuntu	14.04	noarch	postgresql-9.1	< 9.1.12-1	UNKNOWN