CVE-2009-0922

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

CVSS v2.0 NVD

4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

10.24% chance of exploitation in the next 30 days, 96th percentile

Published

2009-03-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32849

Security advisories

• http://secunia.com/advisories/34453
• http://secunia.com/advisories/35100
• http://www.postgresql.org/about/news.1065
• http://www.vupen.com/english/advisories/2009/0767
• http://www.vupen.com/english/advisories/2009/1316
• http://www.securityfocus.com/bid/34090
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:079
• http://www.redhat.com/support/errata/RHSA-2009-1067.html

References

• CVE Record
• NVD entry