Vulnerability in PostgreSQL
CVE-2005-1410
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.
EPSS: 0.004 (34.2th percentile) — read the EPSS interpretation.
Affected products
- Postgresql — versions 7.4, 7.4.3, 7.4.5
- Trustix Secure_linux — versions 2.0
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (Patch, vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_FEDORA, vendor-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)