CVE-2005-0245: Buffer Overflow
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0245?
CVE-2005-0245 has a high severity rating due to its potential to allow arbitrary code execution through a buffer overflow.
How do I fix CVE-2005-0245?
To fix CVE-2005-0245, upgrade your PostgreSQL installation to version 8.0.1 or later, as it includes patches for this vulnerability.
Which versions of PostgreSQL are affected by CVE-2005-0245?
CVE-2005-0245 affects PostgreSQL versions 8.0.0 and earlier, along with versions 7.3.x and 7.4.x below 7.4.8.
What type of vulnerability is CVE-2005-0245?
CVE-2005-0245 is classified as a buffer overflow vulnerability that can lead to heap-based execution of arbitrary code.
How can attackers exploit CVE-2005-0245?
Attackers can exploit CVE-2005-0245 by providing a large number of arguments to a refcursor function, triggering the buffer overflow.