VDB
CVE-2010-0442
CVE-2010-0442
PUBLISHED
Reported by redhat · Published February 2, 2010
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a |
Exploit Intelligence
- http://www.securityfocus.com/bid/37973 (nist-nvd)
Timeline
- Feb 2, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
References
- RHSA-2010:0427 vendor-advisoryx_refsource_REDHAT
- 1023510 vdb-entryx_refsource_SECTRACK
- RHSA-2010:0428 vendor-advisoryx_refsource_REDHAT
- DSA-2051 vendor-advisoryx_refsource_DEBIAN
- USN-933-1 vendor-advisoryx_refsource_UBUNTU
- 39820 third-party-advisoryx_refsource_SECUNIA
- [oss-security] 20100127 Re: CVE id request: postgresql bitsubstr overflow mailing-listx_refsource_MLIST
- ADV-2010-1221 vdb-entryx_refsource_VUPEN
- 37973 vdb-entryx_refsource_BID
- x_refsource_CONFIRM
- x_refsource_MISC
- x_refsource_CONFIRM
- ADV-2010-1207 vdb-entryx_refsource_VUPEN
- x_refsource_MISC
- ADV-2010-1022 vdb-entryx_refsource_VUPEN
- [pgsql-hackers] 20100107 Re: Patch: Allow substring/replace() to get/set bit values mailing-listx_refsource_MLIST
- 39566 third-party-advisoryx_refsource_SECUNIA
- x_refsource_CONFIRM
- postgresql-substring-bo(55902) vdb-entryx_refsource_XF
- [pgsql-committers] 20100107 pgsql: Make bit/varbit substring() treat any negative length as meaning mailing-listx_refsource_MLIST
…and 6 more