NVD

Id
15337  
Name
CVE-2010-4015  
Description
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2011-02-01  
Modified Date
2016-12-07  
Seq
2010-4015  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86354 15337 CVE-2010-4015 http://git.postgresql.org/gitweb?p=postgresql.git;a=commitdiff;h=7ccb6dc2d3e266a551827bb99179708580f72431  View
86355 15337 CVE-2010-4015 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
86356 15337 CVE-2010-4015 FEDORA-2011-0990  View
86357 15337 CVE-2010-4015 FEDORA-2011-0963  View
86358 15337 CVE-2010-4015 SUSE-SR:2011:005  View
86359 15337 CVE-2010-4015 SSRT100617  View
86360 15337 CVE-2010-4015 DSA-2157  View
86361 15337 CVE-2010-4015 MDVSA-2011:021  View
86362 15337 CVE-2010-4015 http://www.postgresql.org/about/news.1289  View
86363 15337 CVE-2010-4015 http://www.postgresql.org/support/security  View
86364 15337 CVE-2010-4015 RHSA-2011:0197  View
86365 15337 CVE-2010-4015 RHSA-2011:0198  View
86366 15337 CVE-2010-4015 46084  View
86367 15337 CVE-2010-4015 USN-1058-1  View
86368 15337 CVE-2010-4015 ADV-2011-0262  View
86369 15337 CVE-2010-4015 ADV-2011-0278  View
86370 15337 CVE-2010-4015 ADV-2011-0283  View
86371 15337 CVE-2010-4015 ADV-2011-0287  View
86372 15337 CVE-2010-4015 ADV-2011-0299  View
86373 15337 CVE-2010-4015 ADV-2011-0303  View
86374 15337 CVE-2010-4015 ADV-2011-0349  View
86375 15337 CVE-2010-4015 postgresql-gettoken-buffer-overflow(65060)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30907 JVNDB-2011-001146 PostgreSQL におけるスタックベースのバッファオーバーフローの脆弱性 PostgreSQL の intarray array モジュール内にある contrib/intarray/_int_bool.c の gettoken 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2010-4015 46595 CVE-2010-4015 15337 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001146.html 2011-01-31 2011-08-29 View