EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbgcreatelistener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg function, as demonstrated by (1) pldbggetstack and (2) pldbgaborttarget, which triggers use of an uninitialized pointer.