Vulnerability in PostgreSQL
CVE-2007-0555
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 8.5 (High). Vector: AV:N/AC:L/Au:S/C:C/I:N/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.048 (91.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 92nd percentile — 91.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.047 · newest: 0.048 · change: +0.001
Affected products
References
- issues.rpath.com/browse/RPL-1025 (Broken Link)
- secunia.com/advisories/24050 (Broken Link, third-party-advisory)
- www.securityfocus.com/bid/22387 (VDB Entry, Third Party Advisory, vdb-entry)
- secunia.com/advisories/24513 (Broken Link, third-party-advisory)
- www.debian.org/security/2007/dsa-1261 (vendor-advisory, Third Party Advisory)
- secunia.com/advisories/24315 (Broken Link, third-party-advisory)
- www.redhat.com/support/errata/RHSA-2007-0068.html (vendor-advisory, Third Party Advisory)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:9739 (signature, Third Party Advisory, vdb-entry)
- secunia.com/advisories/24158 (Broken Link, third-party-advisory)
- www.securityfocus.com/archive/1/459448/100/0/threaded (mailing-list, VDB Entry, Third Party Advisory)