CVE-2015-0241: Buffer Overflow
The tochar function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a (1) large number of digits when processing a numeric formatting template, which triggers a buffer over-read, or (2) crafted timestamp formatting template, which triggers a buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2015-0241?
CVE-2015-0241 is a vulnerability in PostgreSQL that allows remote authenticated users to cause a denial of service or possibly execute arbitrary code.
How does CVE-2015-0241 affect PostgreSQL?
CVE-2015-0241 affects PostgreSQL versions before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1.
What is the severity of CVE-2015-0241?
CVE-2015-0241 has a severity rating of 8.8 (high).
How can CVE-2015-0241 be exploited?
CVE-2015-0241 can be exploited by sending a large number of digits when processing a numeric value using the to_char function in PostgreSQL.
Are there any references available for CVE-2015-0241?
Yes, you can find references for CVE-2015-0241 at the following links: [1] [2] [3].