CVE-2010-4015
- State
- Published
- Severity
- Not scored
- Published
- Feb 2, 2011
- Updated
- Aug 7, 2024
- Reserved
- Oct 20, 2010
Description
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2011-0283vdb-entry
- 70740vdb-entry
- 43144third-party-advisory
- HPSBMU02781vendor-advisory
- RHSA-2011:0198vendor-advisory
- FEDORA-2011-0990vendor-advisory
- RHSA-2011:0197vendor-advisory
- http://www.postgresql.org/about/news.1289
- ADV-2011-0349vdb-entry
- 43187third-party-advisory
- SUSE-SR:2011:005vendor-advisory
- USN-1058-1vendor-advisory
- MDVSA-2011:021vendor-advisory
- ADV-2011-0262vdb-entry
- ADV-2011-0303vdb-entry
- DSA-2157vendor-advisory
- ADV-2011-0287vdb-entry
- 43155third-party-advisory
- 43154third-party-advisory
- 43188third-party-advisory
- http://www.postgresql.org/support/security
- 46084vdb-entry
- postgresql-gettoken-buffer-overflow(65060)vdb-entry
- 43240third-party-advisory
- http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commitdiff%3Bh=7ccb6dc2d3e266a551827bb99179708580f72431
- FEDORA-2011-0963vendor-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- ADV-2011-0278vdb-entry
- ADV-2011-0299vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.