| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 8.0= 8.0.0= 8.0.1= 8.0.10= 8.0.11= 8.0.12= 8.0.13= 8.0.14= 8.0.15= 8.0.16= 8.0.17= 8.0.18= 8.0.19= 8.0.2= 8.0.20= 8.0.21= 8.0.22= 8.0.23= 8.0.3= 8.0.317= 8.0.4= 8.0.5= 8.0.6= 8.0.7= 8.0.8= 8.0.9= 8.1= 8.1.0= 8.1.1= 8.1.10= 8.1.11= 8.1.12= 8.1.13= 8.1.14= 8.1.15= 8.1.16= 8.1.17= 8.1.18= 8.1.19= 8.1.2= 8.1.20= 8.1.3= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 8.1.8= 8.1.9= 8.2= 8.2.1= 8.2.10= 8.2.11= 8.2.12= 8.2.13= 8.2.14= 8.2.15= 8.2.16= 8.2.2= 8.2.3= 8.2.4= 8.2.5= 8.2.6= 8.2.7= 8.2.8= 8.2.9= 8.3= 8.3.1= 8.3.10= 8.3.2= 8.3.3= 8.3.4= 8.3.5= 8.3.6= 8.3.7= 8.3.8= 8.3.9= 8.4= 8.5≤ 8.4.1 |
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free