CVE-2009-3229: Medium severity postgresql common vulnerability
Quoting upstream PostgreSQL security page: http://www.postgresql.org/support/security.html
Authenticated non-superusers can shut down the backend server by re-LOAD-ing libraries in $libdir/plugins, if any libraries are present there.
Affected versions: 8.4, 8.3, 8.2
Fixed in versions: 8.4.1, 8.3.8, 8.2.14
Severity: D - A vulnerability that is exploitable for denial-of-service, but requiring a valid prior login.
Other sources
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3229?
CVE-2009-3229 has a severity rating of medium due to its potential to cause denial of service.
How do I fix CVE-2009-3229?
To fix CVE-2009-3229, upgrade your PostgreSQL installation to version 8.4.1 or later.
What versions of PostgreSQL are affected by CVE-2009-3229?
CVE-2009-3229 affects PostgreSQL versions 8.4 prior to 8.4.1, 8.3 prior to 8.3.8, and 8.2 prior to 8.2.14.
What is the impact of CVE-2009-3229 on PostgreSQL?
The impact of CVE-2009-3229 allows remote authenticated users to cause a shutdown of the backend server.
Is CVE-2009-3229 a remote vulnerability?
Yes, CVE-2009-3229 is a remote vulnerability that can be exploited by authenticated users.