NVD

Id
12279  
Name
CVE-2010-0733  
Description
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-03-19  
Modified Date
2010-09-09  
Seq
2010-0733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67558 12279 CVE-2010-0733 [pgsql-bugs] 20091028 BUG #5145: Complex query with lots of LEFT JOIN causes segfault  View
67559 12279 CVE-2010-0733 [pgsql-bugs] 20091029 Re: BUG #5145: Complex query with lots of LEFT JOIN causes segfault  View
67560 12279 CVE-2010-0733 [pgsql-bugs] 20091029 Re: BUG #5145: Complex query with lots of LEFT JOIN causes segfault  View
67561 12279 CVE-2010-0733 [pgsql-bugs] 20091030 Re: BUG #5145: Complex query with lots of LEFT JOIN causes segfault  View
67562 12279 CVE-2010-0733 http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=64b057e6823655fb6c5d1f24a28f236b94dd6c54  View
67563 12279 CVE-2010-0733 SUSE-SR:2010:014  View
67564 12279 CVE-2010-0733 oval:org.mitre.oval:def:10691  View
67565 12279 CVE-2010-0733 [oss-security] 20100309 CVE Request: postgresql integer overflow in hash table size calculation  View
67566 12279 CVE-2010-0733 [oss-security] 20100316 Re: CVE Request: postgresql integer overflow in hash table size calculation  View
67567 12279 CVE-2010-0733 RHSA-2010:0427  View
67568 12279 CVE-2010-0733 RHSA-2010:0428  View
67569 12279 CVE-2010-0733 RHSA-2010:0429  View
67570 12279 CVE-2010-0733 38619  View
67571 12279 CVE-2010-0733 ADV-2010-1197  View
67572 12279 CVE-2010-0733 https://bugzilla.redhat.com/show_bug.cgi?id=546621  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35731 JVNDB-2010-001511 PostgreSQL における整数オーバーフローの脆弱性 PostgreSQL の src/backend/executor/nodeHash.c には、多数の "LEFT JOIN" を伴う SELECT ステートメントの処理においてハッシュテーブルサイズの計算に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2010-0733 43313 CVE-2010-0733 12279 3.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001511.html 2010-03-19 2010-06-09 View