CVE-2010-4015

EUVD-2010-3991
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
postgresqlpostgresql
8.3
postgresqlpostgresql
8.3.1
postgresqlpostgresql
8.3.2
postgresqlpostgresql
8.3.3
postgresqlpostgresql
8.3.4
postgresqlpostgresql
8.3.5
postgresqlpostgresql
8.3.6
postgresqlpostgresql
8.3.7
postgresqlpostgresql
8.3.8
postgresqlpostgresql
8.3.9
postgresqlpostgresql
8.3.10
postgresqlpostgresql
8.3.11
postgresqlpostgresql
8.3.12
postgresqlpostgresql
8.3.13
postgresqlpostgresql
9.0
postgresqlpostgresql
9.0.1
postgresqlpostgresql
9.0.2
postgresqlpostgresql
8.4
postgresqlpostgresql
8.4.1
postgresqlpostgresql
8.4.2
postgresqlpostgresql
8.4.3
postgresqlpostgresql
8.4.4
postgresqlpostgresql
8.4.5
postgresqlpostgresql
8.4.6
postgresqlpostgresql
8.2
postgresqlpostgresql
8.2.1
postgresqlpostgresql
8.2.2
postgresqlpostgresql
8.2.3
postgresqlpostgresql
8.2.4
postgresqlpostgresql
8.2.5
postgresqlpostgresql
8.2.6
postgresqlpostgresql
8.2.7
postgresqlpostgresql
8.2.8
postgresqlpostgresql
8.2.9
postgresqlpostgresql
8.2.10
postgresqlpostgresql
8.2.11
postgresqlpostgresql
8.2.12
postgresqlpostgresql
8.2.13
postgresqlpostgresql
8.2.14
postgresqlpostgresql
8.2.15
postgresqlpostgresql
8.2.16
postgresqlpostgresql
8.2.17
postgresqlpostgresql
8.2.18
postgresqlpostgresql
8.2.19
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
postgresql-8.1
dapper
Fixed 8.1.23-0ubuntu0.6.06.1
released
hardy
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
postgresql-8.3
dapper
dne
hardy
Fixed 8.3.14-0ubuntu8.04
released
karmic
ignored
lucid
dne
maverick
dne
natty
dne
postgresql-8.4
dapper
dne
hardy
dne
karmic
Fixed 8.4.7-0ubuntu0.9.10
released
lucid
Fixed 8.4.7-0ubuntu0.10.04
released
maverick
Fixed 8.4.7-0ubuntu0.10.10
released
natty
not-affected
Common Weakness Enumeration
References