The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:36
Type | Values Removed | Values Added |
---|---|---|
References | () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154 - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html - | |
References | () http://secunia.com/advisories/28359 - Vendor Advisory | |
References | () http://secunia.com/advisories/28376 - Vendor Advisory | |
References | () http://secunia.com/advisories/28437 - Vendor Advisory | |
References | () http://secunia.com/advisories/28438 - Vendor Advisory | |
References | () http://secunia.com/advisories/28454 - Vendor Advisory | |
References | () http://secunia.com/advisories/28455 - Vendor Advisory | |
References | () http://secunia.com/advisories/28464 - Vendor Advisory | |
References | () http://secunia.com/advisories/28477 - | |
References | () http://secunia.com/advisories/28479 - Vendor Advisory | |
References | () http://secunia.com/advisories/28679 - Vendor Advisory | |
References | () http://secunia.com/advisories/28698 - Vendor Advisory | |
References | () http://secunia.com/advisories/29638 - Vendor Advisory | |
References | () http://security.gentoo.org/glsa/glsa-200801-15.xml - | |
References | () http://securitytracker.com/id?1019157 - | |
References | () http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894 - | |
References | () http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894 - | |
References | () http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1 - | |
References | () http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1 - | |
References | () http://www.debian.org/security/2008/dsa-1460 - | |
References | () http://www.debian.org/security/2008/dsa-1463 - | |
References | () http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 - | |
References | () http://www.postgresql.org/about/news.905 - | |
References | () http://www.redhat.com/support/errata/RHSA-2008-0038.html - | |
References | () http://www.redhat.com/support/errata/RHSA-2008-0040.html - | |
References | () http://www.securityfocus.com/archive/1/485864/100/0/threaded - | |
References | () http://www.securityfocus.com/archive/1/486407/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/27163 - Patch | |
References | () http://www.vupen.com/english/advisories/2008/0061 - Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2008/0109 - Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2008/1071/references - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/39499 - | |
References | () https://issues.rpath.com/browse/RPL-1768 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9804 - | |
References | () https://usn.ubuntu.com/568-1/ - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html - |
Information
Published : 2008-01-09 21:46
Updated : 2025-04-09 00:30
NVD link : CVE-2007-4769
Mitre link : CVE-2007-4769
CVE.ORG link : CVE-2007-4769
JSON object : View
Products Affected
tcl_tk
- tcl_tk
postgresql
- postgresql
CWE
CWE-189
Numeric Errors