Denial Of Service (DoS)

2020-04-1000:37:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.011 Low

EPSS

Percentile

84.8%

JSON

postgresql is vulnerable to denial of service. A flaw was found in the way PostgreSQL handles external plug-ins. This flaw could allow remote, authenticated users without superuser privileges to crash the back-end server by using the LOAD command on libraries in “/var/lib/pgsql/plugins/” that have already been loaded, causing a temporary denial of service during crash recovery.

CPENameOperatorVersion
postgresqleq8.1.9__1.el5
postgresqleq8.2.4__6.el5s2
postgresqleq8.2.6__1.el5s2
postgresqleq8.2.11__1.el5s2
postgresqleq8.1.8__1.el5
postgresqleq8.2.9__1.el5s2
postgresqleq8.2.13__2.el5s2
postgresqleq8.1.11__1.el5_1.1
phpeq5.1.6__7.el5
phpeq5.1.6__11.el5

Name	Operator	Version
postgresql	eq	8.1.9__1.el5
postgresql	eq	8.2.4__6.el5s2
postgresql	eq	8.2.6__1.el5s2
postgresql	eq	8.2.11__1.el5s2
postgresql	eq	8.1.8__1.el5
postgresql	eq	8.2.9__1.el5s2
postgresql	eq	8.2.13__2.el5s2
postgresql	eq	8.1.11__1.el5_1.1
php	eq	5.1.6__7.el5
php	eq	5.1.6__11.el5