CVE-2010-0442

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

13.36% chance of exploitation in the next 30 days, 96th percentile

Published

2010-02-02

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33571

References

• CVE Record
• NVD entry

Related

• CVE-2010-0440
• CVE-2010-0453
• CVE-2010-0437
• CVE-2010-0456
• CVE-2010-0432
• CVE-2010-0457