// For flags

CVE-2013-0255

postgresql: array indexing error in enum_recv()

Severity Score

6.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.

PostgreSQL v9.2.x anteriores a v9.2.3, v9.1.x anteriores a v9.1.8, v9.0.x anteriores a v9.0.12, v8.4.x anteriores a v8.4.16, y v8.3.x anteriores a v8.3.23 no declaran correctamente la función enum_recv en backend/utils/adt/enum.c, lo cual provoca que se invoque con argumentos incorrectos y permitiendo que usuarios remotos autenticados causen una denegación de servicio (caída del servidor)o la lectura de procesos de memoria a través de un comando SQL manipulado que provoca un error de indexación del array y lectura fuera de rango.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
None
Integrity
None
Availability
Complete
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-12-06 CVE Reserved
  • 2013-02-12 CVE Published
  • 2024-03-09 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
CAPEC
References (22)
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3
Search vendor "Postgresql" for product "Postgresql" and version "8.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.1
Search vendor "Postgresql" for product "Postgresql" and version "8.3.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.2
Search vendor "Postgresql" for product "Postgresql" and version "8.3.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.3
Search vendor "Postgresql" for product "Postgresql" and version "8.3.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.4
Search vendor "Postgresql" for product "Postgresql" and version "8.3.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.5
Search vendor "Postgresql" for product "Postgresql" and version "8.3.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.6
Search vendor "Postgresql" for product "Postgresql" and version "8.3.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.7
Search vendor "Postgresql" for product "Postgresql" and version "8.3.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.8
Search vendor "Postgresql" for product "Postgresql" and version "8.3.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.9
Search vendor "Postgresql" for product "Postgresql" and version "8.3.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.10
Search vendor "Postgresql" for product "Postgresql" and version "8.3.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.11
Search vendor "Postgresql" for product "Postgresql" and version "8.3.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.12
Search vendor "Postgresql" for product "Postgresql" and version "8.3.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.13
Search vendor "Postgresql" for product "Postgresql" and version "8.3.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.14
Search vendor "Postgresql" for product "Postgresql" and version "8.3.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.15
Search vendor "Postgresql" for product "Postgresql" and version "8.3.15"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.16
Search vendor "Postgresql" for product "Postgresql" and version "8.3.16"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.17
Search vendor "Postgresql" for product "Postgresql" and version "8.3.17"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.18
Search vendor "Postgresql" for product "Postgresql" and version "8.3.18"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.19
Search vendor "Postgresql" for product "Postgresql" and version "8.3.19"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.20
Search vendor "Postgresql" for product "Postgresql" and version "8.3.20"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.21
Search vendor "Postgresql" for product "Postgresql" and version "8.3.21"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.3.22
Search vendor "Postgresql" for product "Postgresql" and version "8.3.22"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4
Search vendor "Postgresql" for product "Postgresql" and version "8.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.1
Search vendor "Postgresql" for product "Postgresql" and version "8.4.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.2
Search vendor "Postgresql" for product "Postgresql" and version "8.4.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.3
Search vendor "Postgresql" for product "Postgresql" and version "8.4.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.4
Search vendor "Postgresql" for product "Postgresql" and version "8.4.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.5
Search vendor "Postgresql" for product "Postgresql" and version "8.4.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.6
Search vendor "Postgresql" for product "Postgresql" and version "8.4.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.7
Search vendor "Postgresql" for product "Postgresql" and version "8.4.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.8
Search vendor "Postgresql" for product "Postgresql" and version "8.4.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.9
Search vendor "Postgresql" for product "Postgresql" and version "8.4.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.10
Search vendor "Postgresql" for product "Postgresql" and version "8.4.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.11
Search vendor "Postgresql" for product "Postgresql" and version "8.4.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.12
Search vendor "Postgresql" for product "Postgresql" and version "8.4.12"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.13
Search vendor "Postgresql" for product "Postgresql" and version "8.4.13"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.14
Search vendor "Postgresql" for product "Postgresql" and version "8.4.14"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
8.4.15
Search vendor "Postgresql" for product "Postgresql" and version "8.4.15"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0
Search vendor "Postgresql" for product "Postgresql" and version "9.0"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.1
Search vendor "Postgresql" for product "Postgresql" and version "9.0.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.2
Search vendor "Postgresql" for product "Postgresql" and version "9.0.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.3
Search vendor "Postgresql" for product "Postgresql" and version "9.0.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.4
Search vendor "Postgresql" for product "Postgresql" and version "9.0.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.5
Search vendor "Postgresql" for product "Postgresql" and version "9.0.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.6
Search vendor "Postgresql" for product "Postgresql" and version "9.0.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.7
Search vendor "Postgresql" for product "Postgresql" and version "9.0.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.8
Search vendor "Postgresql" for product "Postgresql" and version "9.0.8"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.9
Search vendor "Postgresql" for product "Postgresql" and version "9.0.9"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.10
Search vendor "Postgresql" for product "Postgresql" and version "9.0.10"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.0.11
Search vendor "Postgresql" for product "Postgresql" and version "9.0.11"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.1
Search vendor "Postgresql" for product "Postgresql" and version "9.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.1.1
Search vendor "Postgresql" for product "Postgresql" and version "9.1.1"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.1.2
Search vendor "Postgresql" for product "Postgresql" and version "9.1.2"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.1.3
Search vendor "Postgresql" for product "Postgresql" and version "9.1.3"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.1.4
Search vendor "Postgresql" for product "Postgresql" and version "9.1.4"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.1.5
Search vendor "Postgresql" for product "Postgresql" and version "9.1.5"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.1.6
Search vendor "Postgresql" for product "Postgresql" and version "9.1.6"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.1.7
Search vendor "Postgresql" for product "Postgresql" and version "9.1.7"
-
Affected
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.2
Search vendor "Postgresql" for product "Postgresql" and version "9.2"
-
Safe
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.2.1
Search vendor "Postgresql" for product "Postgresql" and version "9.2.1"
-
Safe
Postgresql
Search vendor "Postgresql"
Postgresql
Search vendor "Postgresql" for product "Postgresql"
9.2.2
Search vendor "Postgresql" for product "Postgresql" and version "9.2.2"
-
Safe