NVD

Id
29009  
Name
CVE-2014-0066  
Description
The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-03-31  
Modified Date
2016-12-07  
Seq
2014-0066  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153023 29009 CVE-2014-0066 APPLE-SA-2014-10-16-3  View
153024 29009 CVE-2014-0066 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
153025 29009 CVE-2014-0066 RHSA-2014:0469  View
153026 29009 CVE-2014-0066 http://support.apple.com/kb/HT6448  View
153027 29009 CVE-2014-0066 http://wiki.postgresql.org/wiki/20140220securityrelease  View
153028 29009 CVE-2014-0066 DSA-2864  View
153029 29009 CVE-2014-0066 DSA-2865  View
153030 29009 CVE-2014-0066 http://www.postgresql.org/about/news/1506/  View
153031 29009 CVE-2014-0066 https://support.apple.com/kb/HT6536  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12974 JVNDB-2014-001849 PostgreSQL の chkpass 拡張機能におけるサービス運用妨害 (DoS) の脆弱性 PostgreSQL の chkpass 拡張機能は、暗号ライブラリ関数の戻り値を適切にチェックしないため、サービス運用妨害 (NULL ポインタデリファレンスおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-0066 67467 CVE-2014-0066 29009 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001849.html 2014-02-20 2014-11-05 View