NVD

Id
11998  
Name
CVE-2010-0442  
Description
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-02-02  
Modified Date
2010-08-21  
Seq
2010-0442  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66233 11998 CVE-2010-0442 [pgsql-committers] 20100107 pgsql: Make bit/varbit substring() treat any negative length as meaning  View
66234 11998 CVE-2010-0442 [pgsql-hackers] 20100107 Re: Patch: Allow substring/replace() to get/set bit values  View
66235 11998 CVE-2010-0442 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567058  View
66236 11998 CVE-2010-0442 http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=75dea10196c31d98d98c0bafeeb576ae99c09b12  View
66237 11998 CVE-2010-0442 http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=b15087cb39ca9e4bde3c8920fcee3741045d2b83  View
66238 11998 CVE-2010-0442 http://intevydis.blogspot.com/2010/01/postgresql-8023-bitsubstr-overflow.html  View
66239 11998 CVE-2010-0442 oval:org.mitre.oval:def:9720  View
66240 11998 CVE-2010-0442 1023510  View
66241 11998 CVE-2010-0442 USN-933-1  View
66242 11998 CVE-2010-0442 DSA-2051  View
66243 11998 CVE-2010-0442 MDVSA-2010:103  View
66244 11998 CVE-2010-0442 [oss-security] 20100127 Re: CVE id request: postgresql bitsubstr overflow  View
66245 11998 CVE-2010-0442 RHSA-2010:0427  View
66246 11998 CVE-2010-0442 RHSA-2010:0428  View
66247 11998 CVE-2010-0442 RHSA-2010:0429  View
66248 11998 CVE-2010-0442 37973  View
66249 11998 CVE-2010-0442 ADV-2010-1022  View
66250 11998 CVE-2010-0442 ADV-2010-1197  View
66251 11998 CVE-2010-0442 ADV-2010-1207  View
66252 11998 CVE-2010-0442 ADV-2010-1221  View
66253 11998 CVE-2010-0442 postgresql-substring-bo(55902)  View
66254 11998 CVE-2010-0442 https://bugzilla.redhat.com/show_bug.cgi?id=559194  View
66255 11998 CVE-2010-0442 https://bugzilla.redhat.com/show_bug.cgi?id=559259  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35730 JVNDB-2010-001510 PostgreSQL の bitsubstr 関数におけるサービス運用妨害 (DoS) の脆弱性 PostgreSQL の backend/utils/adt/varbit.c 内にある bitsubstr 関数には、第 3 引数が負の整数となっている際の処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる、または詳細不明な影響を受ける脆弱性が存在します。 CVE-2010-0442 43022 CVE-2010-0442 11998 6.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001510.html 2010-02-02 2010-06-09 View