CVE-2007-4772

TRUNG BÌNH 4.0CVE-2007-4772 · Công bố 09/01/2008 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2007-4772 là lỗ hổng mức TRUNG BÌNH (CVSS 4.0) ảnh hưởng postgresql (postgresql), tcl/tk (tcl).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 3.8%, cao hơn 90.0% các lỗ hổng khác.
Cách xử lý: cập nhật lên 7.4.19, 8.0.15, 8.1.11, 8.2.6 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
postgresql postgresql	`≥ 7.4, < 7.4.19≥ 8.0, < 8.0.15≥ 8.1, < 8.1.11≥ 8.2, < 8.2.6`	`7.4.198.0.158.1.118.2.6`
tcl/tk tcl	`< 8.4.17`	`8.4.17`

Mô tả

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

Tham khảo

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp · Broken Link
kb.juniper.net/InfoCenter/index · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html · Mailing List
rhn.redhat.com/errata/RHSA-2013-0122.html · Third Party Advisory
secunia.com/advisories/28359 · Third Party Advisory
secunia.com/advisories/28376 · Third Party Advisory
secunia.com/advisories/28437 · Third Party Advisory
secunia.com/advisories/28438 · Third Party Advisory
secunia.com/advisories/28454 · Third Party Advisory
secunia.com/advisories/28455 · Third Party Advisory
secunia.com/advisories/28464 · Third Party Advisory
secunia.com/advisories/28477 · Third Party Advisory
secunia.com/advisories/28479 · Third Party Advisory
secunia.com/advisories/28679 · Third Party Advisory
secunia.com/advisories/28698 · Third Party Advisory
secunia.com/advisories/29070 · Third Party Advisory
secunia.com/advisories/29248 · Third Party Advisory
secunia.com/advisories/29638 · Third Party Advisory
secunia.com/advisories/30535 · Third Party Advisory
security.gentoo.org/glsa/glsa-200801-15.xml · Third Party Advisory
securitytracker.com/id · Third Party Advisory
sourceforge.net/project/shownotes.php · Third Party Advisory
sourceforge.net/tracker/index.php · Exploit
sunsolve.sun.com/search/document.do · Broken Link
sunsolve.sun.com/search/document.do · Broken Link
debian.org/security/2008/dsa-1460 · Third Party Advisory
debian.org/security/2008/dsa-1463 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
postgresql.org/about/news.905 · Vendor Advisory
redhat.com/support/errata/RHSA-2008-0038.html · Third Party Advisory
redhat.com/support/errata/RHSA-2008-0040.html · Third Party Advisory
redhat.com/support/errata/RHSA-2008-0134.html · Third Party Advisory
securityfocus.com/archive/1/485864/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/486407/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/493080/100/0/threaded · Third Party Advisory
securityfocus.com/bid/27163 · Patch
vmware.com/security/advisories/VMSA-2008-0009.html · Third Party Advisory
vupen.com/english/advisories/2008/0061 · Third Party Advisory
vupen.com/english/advisories/2008/0109 · Third Party Advisory
vupen.com/english/advisories/2008/1071/references · Third Party Advisory
vupen.com/english/advisories/2008/1744 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/39497 · Third Party Advisory
issues.rpath.com/browse/RPL-1768 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569 · Third Party Advisory
usn.ubuntu.com/568-1 · Third Party Advisory
redhat.com/archives/fedora-package-announce/2008-January/msg00397.html · Third Party Advisory
redhat.com/archives/fedora-package-announce/2008-January/msg00469.html · Third Party Advisory

Lỗ hổng khác của postgresql

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí