NVD

Id
29006  
Name
CVE-2014-0063  
Description
Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-31  
Modified Date
2017-01-06  
Seq
2014-0063  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152985 29006 CVE-2014-0063 APPLE-SA-2014-10-16-3  View
152986 29006 CVE-2014-0063 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
152987 29006 CVE-2014-0063 RHSA-2014:0469  View
152988 29006 CVE-2014-0063 61307  View
152989 29006 CVE-2014-0063 http://support.apple.com/kb/HT6448  View
152990 29006 CVE-2014-0063 http://wiki.postgresql.org/wiki/20140220securityrelease  View
152991 29006 CVE-2014-0063 DSA-2864  View
152992 29006 CVE-2014-0063 DSA-2865  View
152993 29006 CVE-2014-0063 http://www.postgresql.org/about/news/1506/  View
152994 29006 CVE-2014-0063 http://www.postgresql.org/support/security/  View
152995 29006 CVE-2014-0063 65719  View
152996 29006 CVE-2014-0063 https://bugzilla.redhat.com/show_bug.cgi?id=1065226  View
152997 29006 CVE-2014-0063 https://github.com/postgres/postgres/commit/4318daecc959886d001a6e79c6ea853e8b1dfb4b  View
152998 29006 CVE-2014-0063 https://support.apple.com/kb/HT6536  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12971 JVNDB-2014-001846 PostgreSQL におけるスタックベースのバッファオーバーフローの脆弱性 PostgreSQL には、(1) 時間間隔 (interval)、(2) タイムスタンプ、または (3) タイムゾーンを含む不正な MAXDATELEN 定数および日時の値に関する処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-0063 67464 CVE-2014-0063 29006 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001846.html 2014-02-20 2014-11-05 View