CVE-2007-0556

PostgreSQL < 8.0.11, 8.1 < 8.1.7, 8.2 < 8.2.2 - Authenticated Denial of Service via ALTER COLUMN TYPE

Title source: llm
STIX 2.1

Description

The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.

References (34)

Core 34
Core References
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1025
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-830
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24050
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22387
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24513
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24315
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11353
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32191
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0068.html
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/459448/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0774
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/459280/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0478
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24151
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-417-2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24577
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24033
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017597
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/417-1/
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_10_sr.html
Various Sources x_refsource_confirm
http://www.postgresql.org/support/security
Mailing List vendor-advisory x_refsource_fedora
http://fedoranews.org/cms/node/2554
Vendor Advisory vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2007/0007
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:037
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0067.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24057
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25220
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24042
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24028
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/33302
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102825-1
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200703-15.xml

Scores

EPSS 0.0194
EPSS Percentile 83.7%

Details

Status published
Products (50)
postgresql/postgresql 1.0
postgresql/postgresql 1.01
postgresql/postgresql 1.02
postgresql/postgresql 1.09
postgresql/postgresql 6.0
postgresql/postgresql 6.1
postgresql/postgresql 6.1.1
postgresql/postgresql 6.2
postgresql/postgresql 6.2.1
postgresql/postgresql 6.3
... and 40 more
Published Feb 06, 2007
Tracked Since Feb 18, 2026