CVE-2015-0242: Buffer Overflow
Stack-based buffer overflow in the printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1, when running on a Windows system, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a floating point number with a large precision, as demonstrated by using the tochar function.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2015-0242?
CVE-2015-0242 refers to a stack-based buffer overflow vulnerability in the *printf function implementations in PostgreSQL before version 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 when running on a Windows system.
How does CVE-2015-0242 impact PostgreSQL?
CVE-2015-0242 allows remote authenticated users to cause a denial of service (crash) and potentially execute arbitrary code by exploiting the vulnerability in the *printf function implementations.
What is the severity of CVE-2015-0242?
CVE-2015-0242 has a severity rating of 8.8 (high).
How can I fix CVE-2015-0242 in PostgreSQL?
To fix CVE-2015-0242 in PostgreSQL, it is recommended to upgrade to version 9.0.19, 9.1.15, 9.2.10, 9.3.6, or 9.4.1, depending on the version you are currently using.
Where can I find more information about CVE-2015-0242?
You can find more information about CVE-2015-0242 in the following references: [1] http://www.debian.org/security/2015/dsa-3155 [2] http://www.postgresql.org/about/news/1569/ [3] http://www.postgresql.org/docs/9.4/static/release-9-4-1.html