Lucene search

K

[email protected]NVD:CVE-2014-2669

HistoryMar 31, 2014 - 2:58 p.m.

CVE-2014-2669

2014-03-3114:58:19

CWE-189

[email protected]

web.nvd.nist.gov

3

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

9.3 High

AI Score

Confidence

High

0.038 Low

EPSS

Percentile

91.9%

Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact via vectors related to the (1) hstore_recv, (2) hstore_from_arrays, and (3) hstore_from_array functions in contrib/hstore/hstore_io.c; and the (4) hstoreArrayToPairs function in contrib/hstore/hstore_op.c, which triggers a buffer overflow. NOTE: this issue was SPLIT from CVE-2014-0064 because it has a different set of affected versions.

Affected configurations

NVD

Node

postgresqlpostgresqlMatch9.0

OR

postgresqlpostgresqlMatch9.0.1

OR

postgresqlpostgresqlMatch9.0.2

OR

postgresqlpostgresqlMatch9.0.3

OR

postgresqlpostgresqlMatch9.0.4

OR

postgresqlpostgresqlMatch9.0.5

OR

postgresqlpostgresqlMatch9.0.6

OR

postgresqlpostgresqlMatch9.0.7

OR

postgresqlpostgresqlMatch9.0.8

OR

postgresqlpostgresqlMatch9.0.9

OR

postgresqlpostgresqlMatch9.0.10

OR

postgresqlpostgresqlMatch9.0.11

OR

postgresqlpostgresqlMatch9.0.12

OR

postgresqlpostgresqlMatch9.0.13

OR

postgresqlpostgresqlMatch9.0.14

OR

postgresqlpostgresqlMatch9.0.15

OR

postgresqlpostgresqlMatch9.1

OR

postgresqlpostgresqlMatch9.1.1

OR

postgresqlpostgresqlMatch9.1.2

OR

postgresqlpostgresqlMatch9.1.3

OR

postgresqlpostgresqlMatch9.1.4

OR

postgresqlpostgresqlMatch9.1.5

OR

postgresqlpostgresqlMatch9.1.6

OR

postgresqlpostgresqlMatch9.1.7

OR

postgresqlpostgresqlMatch9.1.8

OR

postgresqlpostgresqlMatch9.1.9

OR

postgresqlpostgresqlMatch9.1.10

OR

postgresqlpostgresqlMatch9.1.11

OR

postgresqlpostgresqlMatch9.2

OR

postgresqlpostgresqlMatch9.2.1

OR

postgresqlpostgresqlMatch9.2.2

OR

postgresqlpostgresqlMatch9.2.3

OR

postgresqlpostgresqlMatch9.2.4

OR

postgresqlpostgresqlMatch9.2.5

OR

postgresqlpostgresqlMatch9.3

OR

postgresqlpostgresqlMatch9.3.1

OR

postgresqlpostgresqlMatch9.3.2

References

rhn.redhat.com/errata/RHSA-2014-0221.html

rhn.redhat.com/errata/RHSA-2014-0469.html

wiki.postgresql.org/wiki/20140220securityrelease

www.debian.org/security/2014/dsa-2864

www.debian.org/security/2014/dsa-2865

www.postgresql.org/about/news/1506/

www.postgresql.org/support/security/

github.com/postgres/postgres/commit/31400a673325147e1205326008e32135a78b4d8a

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

9.3 High

AI Score

Confidence

High

0.038 Low

EPSS

Percentile

91.9%

Related for NVD:CVE-2014-2669