CVE-2007-4769

MEDIO 6.8CVE-2007-4769 · Published 09/01/2008 · updated 16/06/2026

In breve

CVE-2007-4769 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda postgresql (postgresql), tcl tk (tcl tk).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.6%, superiore al 89.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
postgresql postgresql	`= 7.3= 7.3.1= 7.3.10= 7.3.11= 7.3.12= 7.3.13= 7.3.14= 7.3.15= 7.3.16= 7.3.19= 7.3.2= 7.3.3= 7.3.4= 7.3.6= 7.3.8= 7.3.9= 7.4= 7.4.1= 7.4.10= 7.4.11= 7.4.12= 7.4.13= 7.4.14= 7.4.16= 7.4.17= 7.4.2= 7.4.3= 7.4.4= 7.4.5= 7.4.6= 7.4.7= 7.4.8= 7.4.9= 8.0= 8.0.1= 8.0.11= 8.0.13= 8.0.2= 8.0.3= 8.0.317= 8.0.4= 8.0.5= 8.0.7= 8.0.8= 8.0.9= 8.1.1= 8.1.3= 8.1.4= 8.1.5= 8.1.7= 8.1.8= 8.1.9= 8.2= 8.2.2= 8.2.3= 8.2.4`	No fix yet
tcl tk tcl_tk	`≤ 8.4.16`	No fix yet

Description

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html
secunia.com/advisories/28359 · Vendor Advisory
secunia.com/advisories/28376 · Vendor Advisory
secunia.com/advisories/28437 · Vendor Advisory
secunia.com/advisories/28438 · Vendor Advisory
secunia.com/advisories/28454 · Vendor Advisory
secunia.com/advisories/28455 · Vendor Advisory
secunia.com/advisories/28464 · Vendor Advisory
secunia.com/advisories/28477
secunia.com/advisories/28479 · Vendor Advisory
secunia.com/advisories/28679 · Vendor Advisory
secunia.com/advisories/28698 · Vendor Advisory
secunia.com/advisories/29638

Altre vulnerabilità di postgresql

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

postgresql

= 7.3= 7.3.1= 7.3.10= 7.3.11= 7.3.12= 7.3.13= 7.3.14= 7.3.15= 7.3.16= 7.3.19= 7.3.2= 7.3.3= 7.3.4= 7.3.6= 7.3.8= 7.3.9= 7.4= 7.4.1= 7.4.10= 7.4.11= 7.4.12= 7.4.13= 7.4.14= 7.4.16= 7.4.17= 7.4.2= 7.4.3= 7.4.4= 7.4.5= 7.4.6= 7.4.7= 7.4.8= 7.4.9= 8.0= 8.0.1= 8.0.11= 8.0.13= 8.0.2= 8.0.3= 8.0.317= 8.0.4= 8.0.5= 8.0.7= 8.0.8= 8.0.9= 8.1.1= 8.1.3= 8.1.4= 8.1.5= 8.1.7= 8.1.8= 8.1.9= 8.2= 8.2.2= 8.2.3= 8.2.4

No fix yet

tcl tk

tcl_tk

≤ 8.4.16

No fix yet

Altre vulnerabilità di postgresql

Vedi tutto →