Vulnerability in Ocaml Postgresql-Ocaml
CVE-2009-2943
The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.
EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.
Affected products
- Ocaml Postgresql-ocaml — versions 1.5.4, 1.7.0, 1.12.1
- Postgresql
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)