CVE-2005-0245

Public Exploit

Description

Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 23.11% Top 5%

Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory novell.com Vendor Advisory postgresql.org Vendor Advisory postgresql.org Vendor Advisory postgresql.org Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/19188	vdb entry third party advisory
http://archives.postgresql.org/pgsql-committers/2005-02/msg00049.php	mailing list vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:040	vendor advisory broken link
http://marc.info/?l=bugtraq&m=110806034116082&w=2	issue tracking mailing list third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10175	vdb entry third party advisory signature
http://archives.postgresql.org/pgsql-patches/2005-01/msg00216.php	mailing list exploit vendor advisory
http://www.redhat.com/support/errata/RHSA-2005-138.html	patch vendor advisory
http://secunia.com/advisories/12948	exploit third party advisory patch vendor advisory
http://www.redhat.com/support/errata/RHSA-2005-150.html	patch vendor advisory
http://archives.postgresql.org/pgsql-committers/2005-01/msg00298.php	mailing list vendor advisory
http://www.securityfocus.com/bid/12417	vdb entry third party advisory
http://www.debian.org/security/2005/dsa-683	vendor advisory exploit
http://www.novell.com/linux/security/advisories/2005_36_sudo.html	vendor advisory broken link

Frequently Asked Questions

What is the severity of CVE-2005-0245?: CVE-2005-0245 has been scored as a high severity vulnerability.
How to fix CVE-2005-0245?: To fix CVE-2005-0245, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-0245 being actively exploited in the wild?: It is possible that CVE-2005-0245 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~23% probability that this vulnerability will be exploited by malicious actors in the next 30 days.