CVE-2013-0255: Input Validation

First published: Tue Feb 05 2013(Updated: )

An array index error, leading to out of heap-based buffer bounds read flaw was found in the way PostgreSQL, an advanced Object-Relational database management system (DBMS), performed retrieval of textual form of error message representation when processing certain enumeration types. An unprivileged database user could issue a specially-crafted SQL query that, when processed by the server component of the PostgreSQL service, would lead to denial of service (daemon crash) or disclosure (of certain portions of) server memory.

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/first-publish-date
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/references
• agent/weakness
• agent/severity
• agent/author
• agent/softwarecombine
• agent/description
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2013-0255
• agent/software-canonical-lookup
• agent/event
• agent/trending
• agent/tags
• agent/source
• vendor/postgresql
• canonical/postgresql postgresql
• version/postgresql postgresql/8.3
• version/postgresql postgresql/8.3.1
• version/postgresql postgresql/8.3.2
• version/postgresql postgresql/8.3.3
• version/postgresql postgresql/8.3.4
• version/postgresql postgresql/8.3.5
• version/postgresql postgresql/8.3.6
• version/postgresql postgresql/8.3.7
• version/postgresql postgresql/8.3.8
• version/postgresql postgresql/8.3.9
• version/postgresql postgresql/8.3.10
• version/postgresql postgresql/8.3.11
• version/postgresql postgresql/8.3.12
• version/postgresql postgresql/8.3.13
• version/postgresql postgresql/8.3.14
• version/postgresql postgresql/8.3.15
• version/postgresql postgresql/8.3.16
• version/postgresql postgresql/8.3.17
• version/postgresql postgresql/8.3.18
• version/postgresql postgresql/8.3.19
• version/postgresql postgresql/8.3.20
• version/postgresql postgresql/8.3.21
• version/postgresql postgresql/8.3.22
• version/postgresql postgresql/8.4
• version/postgresql postgresql/8.4.1
• version/postgresql postgresql/8.4.2
• version/postgresql postgresql/8.4.3
• version/postgresql postgresql/8.4.4
• version/postgresql postgresql/8.4.5
• version/postgresql postgresql/8.4.6
• version/postgresql postgresql/8.4.7
• version/postgresql postgresql/8.4.8
• version/postgresql postgresql/8.4.9
• version/postgresql postgresql/8.4.10
• version/postgresql postgresql/8.4.11
• version/postgresql postgresql/8.4.12
• version/postgresql postgresql/8.4.13
• version/postgresql postgresql/8.4.14
• version/postgresql postgresql/8.4.15
• version/postgresql postgresql/9.0
• version/postgresql postgresql/9.0.1
• version/postgresql postgresql/9.0.2
• version/postgresql postgresql/9.0.3
• version/postgresql postgresql/9.0.4
• version/postgresql postgresql/9.0.5
• version/postgresql postgresql/9.0.6
• version/postgresql postgresql/9.0.7
• version/postgresql postgresql/9.0.8
• version/postgresql postgresql/9.0.9
• version/postgresql postgresql/9.0.10
• version/postgresql postgresql/9.0.11
• version/postgresql postgresql/9.1
• version/postgresql postgresql/9.1.1
• version/postgresql postgresql/9.1.2
• version/postgresql postgresql/9.1.3
• version/postgresql postgresql/9.1.4
• version/postgresql postgresql/9.1.5
• version/postgresql postgresql/9.1.6
• version/postgresql postgresql/9.1.7
• version/postgresql postgresql/9.2
• version/postgresql postgresql/9.2.1
• version/postgresql postgresql/9.2.2
• package-manager/redhat