Detections
Analytics
CVE-2014-0064
critical
Description
Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, which trigger a buffer overflow. NOTE: this identifier has been SPLIT due to different affected versions; use CVE-2014-2669 for the hstore vector.
References
https://support.apple.com/kb/HT6536
https://github.com/postgres/postgres/commit/31400a673325147e1205326008e32135a78b4d8a
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-0157
https://bugzilla.redhat.com/show_bug.cgi?id=1065230
http://www.ubuntu.com/usn/USN-2120-1
http://www.securityfocus.com/bid/65725
http://www.postgresql.org/support/security/
http://www.postgresql.org/about/news/1506/
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
http://www.debian.org/security/2014/dsa-2865
http://www.debian.org/security/2014/dsa-2864
http://wiki.postgresql.org/wiki/20140220securityrelease
http://support.apple.com/kb/HT6448
http://secunia.com/advisories/61307
http://rhn.redhat.com/errata/RHSA-2014-0469.html
http://rhn.redhat.com/errata/RHSA-2014-0249.html
http://rhn.redhat.com/errata/RHSA-2014-0221.html
http://rhn.redhat.com/errata/RHSA-2014-0211.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html