security flaw
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | |||
| postgresql-0:8.1.8-1.el5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2007:0068 | 2007-03-14T00:00:00Z |
| Red Hat Web Application Stack for RHEL 4 | |||
| postgresql-0:8.1.7-3.el4s1.1 | cpe:/a:redhat:rhel_application_stack:1 | RHSA-2007:0067 | 2007-02-07T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2007-0554 | The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server. |
Ubuntu USN |
USN-417-1 | PostgreSQL vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.1% (3.110% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.