CVE-2009-2943: High severity postgresql-ocaml vulnerability
The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2943?
CVE-2009-2943 has a moderate severity level due to potential remote code execution risks associated with improper multibyte character encoding handling.
How do I fix CVE-2009-2943?
To fix CVE-2009-2943, upgrade to a version of postgresql-ocaml that is not affected, specifically versions above 1.12.1.
What systems are affected by CVE-2009-2943?
CVE-2009-2943 affects postgresql-ocaml bindings versions 1.5.4, 1.7.0, and 1.12.1.
Can CVE-2009-2943 be exploited remotely?
Yes, CVE-2009-2943 can potentially be exploited remotely through the PQescapeStringConn function.
What is the potential risk of CVE-2009-2943?
The potential risk of CVE-2009-2943 involves attackers being able to execute arbitrary code or alter database content through improper escaping of multibyte characters.