CVE-2007-0556

Description

The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.

6.6

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 1.92% Top 20%

Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory novell.com Vendor Advisory fedoranews.org Vendor Advisory trustix.org Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory sun.com Vendor Advisory gentoo.org Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
https://issues.rpath.com/browse/RPL-1025
http://secunia.com/advisories/24050	third party advisory
http://www.securityfocus.com/bid/22387	vdb entry
http://secunia.com/advisories/24513	third party advisory
http://secunia.com/advisories/24315	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11353	vdb entry signature
https://exchange.xforce.ibmcloud.com/vulnerabilities/32191	vdb entry
http://www.redhat.com/support/errata/RHSA-2007-0068.html	vendor advisory
http://www.securityfocus.com/archive/1/459448/100/0/threaded	mailing list
http://www.vupen.com/english/advisories/2007/0774	vdb entry
http://www.securityfocus.com/archive/1/459280/100/0/threaded	mailing list
http://www.vupen.com/english/advisories/2007/0478	vdb entry
http://secunia.com/advisories/24151	third party advisory
http://www.ubuntu.com/usn/usn-417-2	vendor advisory
http://secunia.com/advisories/24577	third party advisory
http://secunia.com/advisories/24033	third party advisory vendor advisory
http://securitytracker.com/id?1017597	vdb entry
https://usn.ubuntu.com/417-1/	vendor advisory
https://issues.rpath.com/browse/RPL-830
http://www.novell.com/linux/security/advisories/2007_10_sr.html	vendor advisory
http://www.postgresql.org/support/security
http://fedoranews.org/cms/node/2554	vendor advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm
http://www.trustix.org/errata/2007/0007	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:037	vendor advisory
http://www.redhat.com/support/errata/RHSA-2007-0067.html	vendor advisory
http://secunia.com/advisories/24057	third party advisory
http://secunia.com/advisories/25220	third party advisory
http://secunia.com/advisories/24042	third party advisory
http://secunia.com/advisories/24028	third party advisory
http://osvdb.org/33302	vdb entry
http://lists.rpath.com/pipermail/security-announce/2007-February/000141.html	mailing list
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102825-1	vendor advisory
http://security.gentoo.org/glsa/glsa-200703-15.xml	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2007-0556?: CVE-2007-0556 has been scored as a medium severity vulnerability.
How to fix CVE-2007-0556?: To fix CVE-2007-0556, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-0556 being actively exploited in the wild?: It is possible that CVE-2007-0556 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.