CVE Vulnerabilities

CVE-2009-0922

Published: Mar 17, 2009 | Modified: Oct 10, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

Affected Software

Name Vendor Start Version End Version
Postgresql Postgresql 8.3.6 8.3.6
Postgresql Postgresql 7.4.24 7.4.24
Postgresql Postgresql 8.2.12 8.2.12
Postgresql Postgresql 8.0.20 8.0.20
Postgresql Postgresql 8.1.16 8.1.16

References