CVE-2012-2655

postgresql: Ability of database owners to install procedural languages via CREATE LANGUAGE found unsafe (DoS)

Published Jul 18, 2012 CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Description
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2491-1 postgresql-8.4 security update
EUVD EUVD EUVD-2012-2640 PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
Ubuntu USN Ubuntu USN USN-1461-1 PostgreSQL vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 7:42 PM
Reserved
May 14, 2012, 12:00 AM
Status
Modified
Published
Jul 18, 2012, 11:55 PM
Modified
Jun 16, 2026, 11:41 PM
Severity
Low
Public date
May 30, 2012, 12:00 AM