CVE-2010-4015

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
postgresqlpostgresql
8.3
postgresqlpostgresql
8.3.1
postgresqlpostgresql
8.3.2
postgresqlpostgresql
8.3.3
postgresqlpostgresql
8.3.4
postgresqlpostgresql
8.3.5
postgresqlpostgresql
8.3.6
postgresqlpostgresql
8.3.7
postgresqlpostgresql
8.3.8
postgresqlpostgresql
8.3.9
postgresqlpostgresql
8.3.10
postgresqlpostgresql
8.3.11
postgresqlpostgresql
8.3.12
postgresqlpostgresql
8.3.13
postgresqlpostgresql
9.0
postgresqlpostgresql
9.0.1
postgresqlpostgresql
9.0.2
postgresqlpostgresql
8.4
postgresqlpostgresql
8.4.1
postgresqlpostgresql
8.4.2
postgresqlpostgresql
8.4.3
postgresqlpostgresql
8.4.4
postgresqlpostgresql
8.4.5
postgresqlpostgresql
8.4.6
postgresqlpostgresql
8.2
postgresqlpostgresql
8.2.1
postgresqlpostgresql
8.2.2
postgresqlpostgresql
8.2.3
postgresqlpostgresql
8.2.4
postgresqlpostgresql
8.2.5
postgresqlpostgresql
8.2.6
postgresqlpostgresql
8.2.7
postgresqlpostgresql
8.2.8
postgresqlpostgresql
8.2.9
postgresqlpostgresql
8.2.10
postgresqlpostgresql
8.2.11
postgresqlpostgresql
8.2.12
postgresqlpostgresql
8.2.13
postgresqlpostgresql
8.2.14
postgresqlpostgresql
8.2.15
postgresqlpostgresql
8.2.16
postgresqlpostgresql
8.2.17
postgresqlpostgresql
8.2.18
postgresqlpostgresql
8.2.19
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
postgresql-8.1
natty
dne
maverick
dne
lucid
dne
karmic
dne
hardy
dne
dapper
Fixed 8.1.23-0ubuntu0.6.06.1
released
postgresql-8.3
natty
dne
maverick
dne
lucid
dne
karmic
ignored
hardy
Fixed 8.3.14-0ubuntu8.04
released
dapper
dne
postgresql-8.4
natty
not-affected
maverick
Fixed 8.4.7-0ubuntu0.10.10
released
lucid
Fixed 8.4.7-0ubuntu0.10.04
released
karmic
Fixed 8.4.7-0ubuntu0.9.10
released
hardy
dne
dapper
dne
Common Weakness Enumeration
References