CVE-2006-5541: Medium severity PostgreSQL postgresql vulnerability
Published Oct 26, 2006
·Updated
backend/parser/parsecoerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.
Affected Software
31 affected components
PostgreSQL postgresql>=7.4<7.4.14
PostgreSQL postgresql>=8.0.0<8.0.9
PostgreSQL postgresql>=8.1.0<8.1.5
PostgreSQL postgresql=8.0.7
PostgreSQL postgresql=8.0.2
PostgreSQL postgresql=8.1
PostgreSQL postgresql=7.4.1
PostgreSQL postgresql=8.1.3
PostgreSQL postgresql=7.4.14
PostgreSQL postgresql=7.4.6
PostgreSQL postgresql=7.4.11
PostgreSQL postgresql=8.0.3
PostgreSQL postgresql=7.4.7
PostgreSQL postgresql=7.4.3
PostgreSQL postgresql=7.4.9
PostgreSQL postgresql=7.4.5
PostgreSQL postgresql=8.0.8
PostgreSQL postgresql=7.4.8
PostgreSQL postgresql=8.0.6
PostgreSQL postgresql=7.4.4
PostgreSQL postgresql=8.1.4
PostgreSQL postgresql=8.0.1
PostgreSQL postgresql=7.4.12
PostgreSQL postgresql=8.1.1
PostgreSQL postgresql=7.4.10
PostgreSQL postgresql=8.0.4
PostgreSQL postgresql=8.0.5
PostgreSQL postgresql=7.4.2
PostgreSQL postgresql=8.0
PostgreSQL postgresql=7.4.13
PostgreSQL postgresql=8.1.2
Remediation
Patch Available
Patch Available
Event History
Oct 26, 2006
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:07 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5541?
CVE-2006-5541 is classified as a denial of service vulnerability that can cause the PostgreSQL daemon to crash.
2
How do I fix CVE-2006-5541?
To resolve CVE-2006-5541, upgrade PostgreSQL to version 8.0.9 or later, or 8.1.5 or later.
3
Which PostgreSQL versions are affected by CVE-2006-5541?
CVE-2006-5541 affects PostgreSQL versions from 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5.
4
Can CVE-2006-5541 be exploited remotely?
Yes, CVE-2006-5541 can be exploited by remote authenticated users to cause a denial of service.
5
What components of PostgreSQL are impacted by CVE-2006-5541?
CVE-2006-5541 specifically affects the coercion handling in the parse_coerce.c file in PostgreSQL.