CVE-2007-0555

Description

PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.

8.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 1.52% Top 20%

Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory novell.com Vendor Advisory fedoranews.org Vendor Advisory trustix.org Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory sgi.com Vendor Advisory sun.com Vendor Advisory gentoo.org Vendor Advisory postgresql.org

Affected: n/a n/a

References

Link	Tags
https://issues.rpath.com/browse/RPL-1025	broken link
http://secunia.com/advisories/24050	third party advisory broken link
http://www.securityfocus.com/bid/22387	vdb entry third party advisory
http://secunia.com/advisories/24513	third party advisory broken link
http://www.debian.org/security/2007/dsa-1261	third party advisory vendor advisory
http://secunia.com/advisories/24315	third party advisory broken link
http://www.redhat.com/support/errata/RHSA-2007-0068.html	third party advisory vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9739	vdb entry third party advisory signature
http://secunia.com/advisories/24158	third party advisory broken link
http://www.securityfocus.com/archive/1/459448/100/0/threaded	mailing list vdb entry third party advisory
http://www.vupen.com/english/advisories/2007/0774	vdb entry third party advisory
http://www.securityfocus.com/archive/1/459280/100/0/threaded	mailing list vdb entry third party advisory
http://www.vupen.com/english/advisories/2007/0478	vdb entry third party advisory
http://osvdb.org/33087	vdb entry broken link
http://secunia.com/advisories/24151	third party advisory broken link
http://www.ubuntu.com/usn/usn-417-2	third party advisory vendor advisory
http://secunia.com/advisories/24284	third party advisory broken link
https://exchange.xforce.ibmcloud.com/vulnerabilities/32195	vdb entry third party advisory
http://secunia.com/advisories/24577	third party advisory broken link
http://secunia.com/advisories/24033	third party advisory broken link
http://securitytracker.com/id?1017597	vdb entry third party advisory
https://usn.ubuntu.com/417-1/	third party advisory vendor advisory
https://issues.rpath.com/browse/RPL-830	broken link
http://www.novell.com/linux/security/advisories/2007_10_sr.html	third party advisory vendor advisory
http://www.postgresql.org/support/security	vendor advisory
http://fedoranews.org/cms/node/2554	third party advisory vendor advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm	third party advisory
http://www.trustix.org/errata/2007/0007	vendor advisory broken link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:037	vendor advisory broken link
http://www.redhat.com/support/errata/RHSA-2007-0064.html	third party advisory vendor advisory
http://www.redhat.com/support/errata/RHSA-2007-0067.html	third party advisory vendor advisory
ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	third party advisory vendor advisory
http://secunia.com/advisories/24057	third party advisory broken link
http://secunia.com/advisories/25220	third party advisory broken link
http://secunia.com/advisories/24042	third party advisory broken link
http://secunia.com/advisories/24028	third party advisory broken link
http://lists.rpath.com/pipermail/security-announce/2007-February/000141.html	mailing list broken link
http://secunia.com/advisories/24094	third party advisory broken link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102825-1	vendor advisory broken link
http://security.gentoo.org/glsa/glsa-200703-15.xml	third party advisory vendor advisory

Frequently Asked Questions

What is the severity of CVE-2007-0555?: CVE-2007-0555 has been scored as a high severity vulnerability.
How to fix CVE-2007-0555?: To fix CVE-2007-0555, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-0555 being actively exploited in the wild?: It is possible that CVE-2007-0555 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.