NVD

Id
58085  
Name
CVE-2007-6067  
Description
Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2008-01-09  
Modified Date
2016-12-07  
Seq
2007-6067  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
297594 58085 CVE-2007-6067 HPSBTU02325  View
297595 58085 CVE-2007-6067 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
297596 58085 CVE-2007-6067 SUSE-SA:2008:005  View
297597 58085 CVE-2007-6067 oval:org.mitre.oval:def:10235  View
297598 58085 CVE-2007-6067 RHSA-2013:0122  View
297599 58085 CVE-2007-6067 GLSA-200801-15  View
297600 58085 CVE-2007-6067 1019157  View
297601 58085 CVE-2007-6067 http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894  View
297602 58085 CVE-2007-6067 http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894  View
297603 58085 CVE-2007-6067 103197  View
297604 58085 CVE-2007-6067 200559  View
297605 58085 CVE-2007-6067 DSA-1460  View
297606 58085 CVE-2007-6067 DSA-1463  View
297607 58085 CVE-2007-6067 MDVSA-2008:004  View
297608 58085 CVE-2007-6067 http://www.postgresql.org/about/news.905  View
297609 58085 CVE-2007-6067 RHSA-2008:0038  View
297610 58085 CVE-2007-6067 RHSA-2008:0040  View
297611 58085 CVE-2007-6067 20080107 PostgreSQL 2007-01-07 Cumulative Security Release  View
297612 58085 CVE-2007-6067 20080115 rPSA-2008-0016-1 postgresql postgresql-server  View
297613 58085 CVE-2007-6067 27163  View
297614 58085 CVE-2007-6067 USN-568-1  View
297615 58085 CVE-2007-6067 ADV-2008-0061  View
297616 58085 CVE-2007-6067 ADV-2008-0109  View
297617 58085 CVE-2007-6067 ADV-2008-1071  View
297618 58085 CVE-2007-6067 postgresql-complex-expression-dos(39498)  View
297619 58085 CVE-2007-6067 https://issues.rpath.com/browse/RPL-1768  View
297620 58085 CVE-2007-6067 FEDORA-2008-0478  View
297621 58085 CVE-2007-6067 FEDORA-2008-0552  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45697 JVNDB-2008-001007 PostgreSQL の TCL の正規表現解析におけるメモリ大量消費のサービス運用妨害 (DoS) の脆弱性 PostgreSQL で使用される TCL の正規表現解析において、二重に入れ子になっている「複雑な」正規表現の処理に不備があり、メモリの大量消費によるサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-6067 29422 CVE-2007-6067 58085 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001007.html 2008-01-06 2008-04-15 View