REDHAT-BUG-1065226: Buffer Overflow
First published: Fri Feb 14 2014(Updated: )
It was found that the buffers used to hold datetime output were too small. Long output could lead to a stack-based buffer overflow, possibly allowing an authenticated database user to crash the PostgreSQL server or execute arbitrary code. Acknowledgements: Red Hat would like to thank the PostgreSQL project for reporting this issue. Upstream acknowledges Noah Misch as the original reporter.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PostgreSQL Common |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/postgres/postgres/commit/4318daecc959886d001a6e79c6ea853e8b1dfb4b
- https://rhn.redhat.com/errata/RHSA-2014-0211.html
- https://rhn.redhat.com/errata/RHSA-2014-0221.html
- https://rhn.redhat.com/errata/RHSA-2014-0249.html
- https://rhn.redhat.com/errata/RHSA-2014-0469.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1065226
- agent/references
- agent/first-publish-date
- agent/last-modified-date
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-0063
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/postgresql
- canonical/postgresql common