NVD

Id
36610  
Name
CVE-2013-0255  
Description
PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-02-12  
Modified Date
2014-01-03  
Seq
2013-0255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187072 36610 CVE-2013-0255 FEDORA-2013-2123  View
187073 36610 CVE-2013-0255 openSUSE-SU-2013:0318  View
187074 36610 CVE-2013-0255 openSUSE-SU-2013:0319  View
187075 36610 CVE-2013-0255 RHSA-2013:1475  View
187076 36610 CVE-2013-0255 DSA-2630  View
187077 36610 CVE-2013-0255 MDVSA-2013:142  View
187078 36610 CVE-2013-0255 http://www.postgresql.org/docs/8.3/static/release-8-3-23.html  View
187079 36610 CVE-2013-0255 http://www.postgresql.org/docs/8.4/static/release-8-4-16.html  View
187080 36610 CVE-2013-0255 http://www.postgresql.org/docs/9.0/static/release-9-0-12.html  View
187081 36610 CVE-2013-0255 http://www.postgresql.org/docs/9.1/static/release-9-1-8.html  View
187082 36610 CVE-2013-0255 http://www.postgresql.org/docs/9.2/static/release-9-2-3.html  View
187083 36610 CVE-2013-0255 57844  View
187084 36610 CVE-2013-0255 USN-1717-1  View
187085 36610 CVE-2013-0255 postgresql-enumrecv-dos(81917)  View
187086 36610 CVE-2013-0255 https://blogs.oracle.com/sunsecurity/entry/cve_2013_0255_array_index  View
187087 36610 CVE-2013-0255 https://bugzilla.redhat.com/show_bug.cgi?id=907892  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19976 JVNDB-2013-001551 PostgreSQL におけるサービス運用妨害 (サーバクラッシュ) の脆弱性 PostgreSQL は、backend/utils/adt/enum.c 内の enum_recv 関数について適切に宣言しないため、間違った引数で呼び出され、サービス運用妨害 (サーバクラッシュ) 状態となる、または重要なプロセスメモリを読まれる脆弱性が存在します。 CVE-2013-0255 60197 CVE-2013-0255 36610 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001551.html 2013-02-07 2014-02-18 View