| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 7.2= 7.2.1= 7.2.2= 7.2.3= 7.2.4= 7.2.5= 7.2.6= 7.2.7= 7.3= 7.3.1= 7.3.2= 7.3.3= 7.3.4= 7.3.5= 7.3.6= 7.3.7= 7.3.8= 7.3.9= 7.4= 7.4.1= 7.4.2= 7.4.3= 7.4.4= 7.4.5= 7.4.6= 7.4.7= 8.0.0= 8.0.1 |
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free