| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 6.3.2= 6.5.3= 7.0.2= 7.0.3= 7.1= 7.1.1= 7.1.2= 7.1.3= 7.2= 7.2.1= 7.2.2= 7.2.3= 7.2.4= 7.2.7= 7.3= 7.3.1= 7.3.10= 7.3.11= 7.3.12= 7.3.13= 7.3.14= 7.3.15= 7.3.2= 7.3.3= 7.3.4= 7.3.6= 7.3.8= 7.3.9= 7.4= 7.4.1= 7.4.10= 7.4.11= 7.4.12= 7.4.13= 7.4.2= 7.4.3= 7.4.4= 7.4.5= 7.4.6= 7.4.7= 7.4.8= 7.4.9= 8.0= 8.0.1= 8.0.2= 8.0.3= 8.0.4= 8.0.5= 8.0.6= 8.0.7= 8.0.8= 8.1= 8.1.1= 8.1.2= 8.1.3= 8.1.4 |
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free