postgresql: possible buffer overflow flaws
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| CloudForms Management Engine 5.x | |||
| cfme-0:5.2.3.2-1.el6cf | cpe:/a:redhat:cloudforms_managementengine:5::el6 | RHSA-2014:0469 | 2014-05-12T00:00:00Z |
| postgresql92-postgresql-0:9.2.7-1.1.el6 | cpe:/a:redhat:cloudforms_managementengine:5::el6 | RHSA-2014:0469 | 2014-05-12T00:00:00Z |
| prince-0:9.0r2-4.el6cf | cpe:/a:redhat:cloudforms_managementengine:5::el6 | RHSA-2014:0469 | 2014-05-12T00:00:00Z |
| ruby193-rubygem-actionpack-1:3.2.13-6.el6cf | cpe:/a:redhat:cloudforms_managementengine:5::el6 | RHSA-2014:0469 | 2014-05-12T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| postgresql84-0:8.4.20-1.el5_10 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2014:0211 | 2014-02-25T00:00:00Z |
| postgresql-0:8.1.23-10.el5_10 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2014:0249 | 2014-03-04T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| postgresql-0:8.4.20-1.el6_5 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:0211 | 2014-02-25T00:00:00Z |
| Red Hat Software Collections for RHEL-6 | |||
| postgresql92-postgresql-0:9.2.7-1.1.el6 | cpe:/a:redhat:rhel_software_collections:1::el6 | RHSA-2014:0221 | 2014-02-27T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2864-1 | postgresql-8.4 security update |
Debian DSA |
DSA-2865-1 | postgresql-9.1 security update |
EUVD |
EUVD-2014-0158 | Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, a different vulnerability than CVE-2014-0063. |
Ubuntu USN |
USN-2120-1 | PostgreSQL vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 5.0% (5.046% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.