REDHAT-BUG-1065226: Buffer Overflow

Published Feb 14, 2014

Updated

It was found that the buffers used to hold datetime output were too small. Long output could lead to a stack-based buffer overflow, possibly allowing an authenticated database user to crash the PostgreSQL server or execute arbitrary code.

Acknowledgements:

Red Hat would like to thank the PostgreSQL project for reporting this issue. Upstream acknowledges Noah Misch as the original reporter.

Affected Software

1 affected component

PostgreSQL postgresql

Event History

Feb 14, 2014

Data Sourced

via Red Hat·07:23 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1065226?

The severity of REDHAT-BUG-1065226 is critical due to the potential for stack-based buffer overflow.

How do I fix REDHAT-BUG-1065226?

To fix REDHAT-BUG-1065226, update PostgreSQL to the latest patched version that addresses the buffer overflow issue.

Who is affected by REDHAT-BUG-1065226?

Authenticated database users of PostgreSQL may be affected by REDHAT-BUG-1065226.

What type of vulnerability is REDHAT-BUG-1065226?

REDHAT-BUG-1065226 is a stack-based buffer overflow vulnerability.

Can REDHAT-BUG-1065226 lead to remote code execution?

Yes, REDHAT-BUG-1065226 could potentially enable an authenticated user to execute arbitrary code on the server.