4
CVSSv2

CVE-2009-0922

Published: 17/03/2009 Updated: 10/10/2018
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 405
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Summary

PostgreSQL prior to 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

Vulnerable Product Search on Vulmon Subscribe to Product

postgresql postgresql 8.1.16

postgresql postgresql 8.0.20

postgresql postgresql 7.4.24

postgresql postgresql 8.3.6

postgresql postgresql 8.2.12

Vendor Advisories

It was discovered that PostgreSQL did not properly handle encoding conversion failures An attacker could exploit this by sending specially crafted requests to PostgreSQL, leading to a denial of service ...

Exploits

source: wwwsecurityfocuscom/bid/34090/info PostgreSQL is prone to a remote denial-of-service vulnerability Exploiting this issue may allow attackers to terminate connections to the PostgreSQL server, denying service to legitimate users test=# CREATE DEFAULT CONVERSION test1 FOR 'LATIN1' TO 'KOI8' FROM ascii_to_mic; CREATE CONVERSION t ...

References