CVE-2009-2943

HIGH 7.5CVE-2009-2943 · Published 22/10/2009 · updated 16/06/2026

In short

CVE-2009-2943 is a HIGH (CVSS 7.5) vulnerability affecting postgresql-ocaml (ocaml).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
postgresql-ocaml ocaml	`= 1.12.1= 1.5.4= 1.7.0`	No fix yet

Description

The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.

References

secunia.com/advisories/37048 · Vendor Advisory
debian.org/security/2009/dsa-1909 · Patch
osvdb.org/59029

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free