CVE-2014-0063

PostgreSQL Stack-Based Buffer Overflow via Datetime Values

Title source: llm
STIX 2.1

Description

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.

References (21)

Core 21
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0211.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0221.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0469.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0249.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6448
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1065226
Vendor Advisory x_refsource_confirm
http://wiki.postgresql.org/wiki/20140220securityrelease
Third Party Advisory vendor-advisory x_refsource_apple
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-2864
Various Sources x_refsource_confirm
http://www.postgresql.org/support/security/
Vendor Advisory x_refsource_confirm
http://www.postgresql.org/about/news/1506/
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2120-1
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT6536
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-2865
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/65719
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/61307

Scores

EPSS 0.0605
EPSS Percentile 90.8%

Details

CWE
CWE-119
Status published
Products (50)
postgresql/postgresql 8.4.1
postgresql/postgresql 8.4.2
postgresql/postgresql 8.4.3
postgresql/postgresql 8.4.4
postgresql/postgresql 8.4.5
postgresql/postgresql 8.4.6
postgresql/postgresql 8.4.7
postgresql/postgresql 8.4.8
postgresql/postgresql 8.4.9
postgresql/postgresql 8.4.10
... and 40 more
Published Mar 31, 2014
Tracked Since Feb 18, 2026