CVE-2006-5540

PostgreSQL 8.1.x < 8.1.5 - Authenticated Denial of Service via Aggregate Functions in UPDATE Statement

Title source: llm
STIX 2.1

Description

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

References (26)

Core 26
Core References
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:194
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-369-2
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017115
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0068.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4182
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22606
Various Sources x_refsource_confirm
http://www.postgresql.org/about/news.664
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24284
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23048
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24577
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_27_sr.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23132
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-369-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22636
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0064.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0067.html
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
Vendor Advisory vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2006/0059/
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22562
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22584
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20717
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24094

Scores

EPSS 0.0210
EPSS Percentile 84.3%

Details

Status published
Products (50)
postgresql/postgresql 6.3.2
postgresql/postgresql 6.5.3
postgresql/postgresql 7.0.2
postgresql/postgresql 7.0.3
postgresql/postgresql 7.1
postgresql/postgresql 7.1.1
postgresql/postgresql 7.1.2
postgresql/postgresql 7.1.3
postgresql/postgresql 7.2
postgresql/postgresql 7.2.1
... and 40 more
Published Oct 26, 2006
Tracked Since Feb 18, 2026