CVE-2009-0922

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

10.24% chance of exploitation in the next 30 days, 95th percentile

Published

2009-03-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32849

References

• CVE Record
• NVD entry

Related

• CVE-2009-0920
• CVE-2009-0927
• CVE-2009-0886
• CVE-2009-0932
• CVE-2009-0885
• CVE-2009-0949