CVE-2010-0733

PostgreSQL <8.5alpha2 - DoS

Title source: llm

Description

Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Bernt Marius Johnsen · textdosmultiple
https://www.exploit-db.com/exploits/33729

References (16)

Scores

EPSS 0.0767
EPSS Percentile 91.8%

Classification

CWE
CWE-189
Status draft

Affected Products (50)

postgresql/postgresql < 8.4.1
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
postgresql/postgresql
... and 35 more

Timeline

Published Mar 19, 2010
Tracked Since Feb 18, 2026