CVE-2007-4769 | BDVDB-2026-28581 Detail
Description#
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:004
- http://www.debian.org/security/2008/dsa-1460
- http://www.securityfocus.com/bid/27163
- https://issues.rpath.com/browse/RPL-1768
- http://www.redhat.com/support/errata/RHSA-2008-0038.html
- http://secunia.com/advisories/28454
- http://www.securityfocus.com/archive/1/485864/100/0/threaded
- http://secunia.com/advisories/28359
- http://www.postgresql.org/about/news.905
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html
- http://www.vupen.com/english/advisories/2008/0061
- http://secunia.com/advisories/28679
- http://www.vupen.com/english/advisories/2008/0109
- http://secunia.com/advisories/28376
- http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894
Show all 38
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1
- http://secunia.com/advisories/28437
- http://secunia.com/advisories/28455
- http://secunia.com/advisories/28477
- http://secunia.com/advisories/29638
- http://secunia.com/advisories/28479
- http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894
- http://www.debian.org/security/2008/dsa-1463
- http://www.redhat.com/support/errata/RHSA-2008-0040.html
- http://www.securityfocus.com/archive/1/486407/100/0/threaded
- http://secunia.com/advisories/28464
- http://secunia.com/advisories/28698
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1
- https://usn.ubuntu.com/568-1/
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html
- http://secunia.com/advisories/28438
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39499
- http://securitytracker.com/id?1019157
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html
- http://security.gentoo.org/glsa/glsa-200801-15.xml
- http://www.vupen.com/english/advisories/2008/1071/references
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9804
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.