| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 7.4= 7.4.3= 7.4.5= 7.4.6= 7.4.7= 8.0= 8.0.1= 8.0.2 |
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free