| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 8.2= 8.2.1= 8.2.10= 8.2.11= 8.2.12= 8.2.13= 8.2.14= 8.2.15= 8.2.16= 8.2.17= 8.2.18= 8.2.19= 8.2.2= 8.2.3= 8.2.4= 8.2.5= 8.2.6= 8.2.7= 8.2.8= 8.2.9= 8.3= 8.3.1= 8.3.10= 8.3.11= 8.3.12= 8.3.13= 8.3.2= 8.3.3= 8.3.4= 8.3.5= 8.3.6= 8.3.7= 8.3.8= 8.3.9= 8.4= 8.4.1= 8.4.2= 8.4.3= 8.4.4= 8.4.5= 8.4.6= 9.0= 9.0.1= 9.0.2 |
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free