Vulnerability in Postgresql

CVE-2006-0678

PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553.

EPSS: 0.003 (25.8th percentile) — read the EPSS interpretation.

Affected products

  • Postgresql — versions 7.3, 7.3.1, 7.3.2
  • N/a — versions n/a

References