NVD

Id
31050  
Name
CVE-2014-2669  
Description
Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact via vectors related to the (1) hstore_recv, (2) hstore_from_arrays, and (3) hstore_from_array functions in contrib/hstore/hstore_io.c; and the (4) hstoreArrayToPairs function in contrib/hstore/hstore_op.c, which triggers a buffer overflow. NOTE: this issue was SPLIT from CVE-2014-0064 because it has a different set of affected versions.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-31  
Modified Date
2014-05-20  
Seq
2014-2669  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163117 31050 CVE-2014-2669 RHSA-2014:0469  View
163118 31050 CVE-2014-2669 http://wiki.postgresql.org/wiki/20140220securityrelease  View
163119 31050 CVE-2014-2669 DSA-2864  View
163120 31050 CVE-2014-2669 DSA-2865  View
163121 31050 CVE-2014-2669 http://www.postgresql.org/about/news/1506/  View
163122 31050 CVE-2014-2669 http://www.postgresql.org/support/security/  View
163123 31050 CVE-2014-2669 https://github.com/postgres/postgres/commit/31400a673325147e1205326008e32135a78b4d8a  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12976 JVNDB-2014-001851 PostgreSQL の contrib/hstore/hstore_io.c における整数オーバーフローの脆弱性 PostgreSQL の contrib/hstore/hstore_io.c には、以下の関数に関する処理に不備があり、バッファオーバーフローを誘発されるため、整数オーバーフローの脆弱性が存在します。 CVE-2014-2669 69956 CVE-2014-2669 31050 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001851.html 2014-02-20 2014-05-26 View