Buffer overflow in PostgreSQL - CVE-2014-0065

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU41877

Buffer overflow in PostgreSQL - CVE-2014-0065

Published: March 31, 2014 / Updated: August 10, 2020


Vulnerability identifier: #VU41877
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-0065
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote #AU# to read and manipulate data.

Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, a different vulnerability than CVE-2014-0063.


Affected software

PostgreSQL
Amazon Linux AMI
Gentoo Linux
Ubuntu
postgresql-8.4 (Ubuntu package)
postgresql-9.1 (Ubuntu package)

How to mitigate CVE-2014-0065

Install update from vendor's website.

postgresql-8.4 (Ubuntu package) - update to 8.4.20-0ubuntu010.04
postgresql-9.1 (Ubuntu package) - addressed in versions 9.1.12-0ubuntu0.12.04, 9.1.12-0ubuntu0.12.10, 9.1.12-0ubuntu0.13.10

External References

Related Security Bulletins