CVE-2006-5540

EPSS 1.93%
Veröffentlicht 26.10.2006 17:07:00
Zuletzt bearbeitet 16.06.2026 22:31:24
Erkennungen
Login

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 29

NVD 56 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Postgresql ≫ Postgresql Version 6.3.2

Postgresql ≫ Postgresql Version 6.5.3

Postgresql ≫ Postgresql Version 7.0.2

Postgresql ≫ Postgresql Version 7.0.3

Postgresql ≫ Postgresql Version 7.1

Postgresql ≫ Postgresql Version 7.1.1

Postgresql ≫ Postgresql Version 7.1.2

Postgresql ≫ Postgresql Version 7.1.3

Postgresql ≫ Postgresql Version 7.2

Postgresql ≫ Postgresql Version 7.2.1

Postgresql ≫ Postgresql Version 7.2.2

Postgresql ≫ Postgresql Version 7.2.3

Postgresql ≫ Postgresql Version 7.2.4

Postgresql ≫ Postgresql Version 7.2.7

Postgresql ≫ Postgresql Version 7.3

Postgresql ≫ Postgresql Version 7.3.1

Postgresql ≫ Postgresql Version 7.3.2

Postgresql ≫ Postgresql Version 7.3.3

Postgresql ≫ Postgresql Version 7.3.4

Postgresql ≫ Postgresql Version 7.3.6

Postgresql ≫ Postgresql Version 7.3.8

Postgresql ≫ Postgresql Version 7.3.9

Postgresql ≫ Postgresql Version 7.3.10

Postgresql ≫ Postgresql Version 7.3.11

Postgresql ≫ Postgresql Version 7.3.12

Postgresql ≫ Postgresql Version 7.3.13

Postgresql ≫ Postgresql Version 7.3.14

Postgresql ≫ Postgresql Version 7.3.15

Postgresql ≫ Postgresql Version 7.4

Postgresql ≫ Postgresql Version 7.4.1

Postgresql ≫ Postgresql Version 7.4.2

Postgresql ≫ Postgresql Version 7.4.3

Postgresql ≫ Postgresql Version 7.4.4

Postgresql ≫ Postgresql Version 7.4.5

Postgresql ≫ Postgresql Version 7.4.6

Postgresql ≫ Postgresql Version 7.4.7

Postgresql ≫ Postgresql Version 7.4.8

Postgresql ≫ Postgresql Version 7.4.9

Postgresql ≫ Postgresql Version 7.4.10

Postgresql ≫ Postgresql Version 7.4.11

Postgresql ≫ Postgresql Version 7.4.12

Postgresql ≫ Postgresql Version 7.4.13

Postgresql ≫ Postgresql Version 8.0

Postgresql ≫ Postgresql Version 8.0.1

Postgresql ≫ Postgresql Version 8.0.2

Postgresql ≫ Postgresql Version 8.0.3

Postgresql ≫ Postgresql Version 8.0.4

Postgresql ≫ Postgresql Version 8.0.5

Postgresql ≫ Postgresql Version 8.0.6

Postgresql ≫ Postgresql Version 8.0.7

Postgresql ≫ Postgresql Version 8.0.8

Postgresql ≫ Postgresql Version 8.1

Postgresql ≫ Postgresql Version 8.1.1

Postgresql ≫ Postgresql Version 8.1.2

Postgresql ≫ Postgresql Version 8.1.3

Postgresql ≫ Postgresql Version 8.1.4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.93%	0.778

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:N/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc

http://secunia.com/advisories/24284

http://secunia.com/advisories/23132

http://www.novell.com/linux/security/advisories/2006_27_sr.html

http://projects.commandprompt.com/public/pgsql/changeset/25504

http://secunia.com/advisories/22562

Patch

Vendor Advisory

http://secunia.com/advisories/22584

Patch

Vendor Advisory

http://secunia.com/advisories/22606

http://secunia.com/advisories/22636

http://secunia.com/advisories/23048

http://secunia.com/advisories/24094

http://secunia.com/advisories/24577

http://securitytracker.com/id?1017115

http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm

http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html

http://www.mandriva.com/security/advisories?name=MDKSA-2006:194

http://www.postgresql.org/about/news.664

http://www.redhat.com/support/errata/RHSA-2007-0064.html

http://www.redhat.com/support/errata/RHSA-2007-0067.html

http://www.redhat.com/support/errata/RHSA-2007-0068.html

http://www.securityfocus.com/bid/20717

Patch

http://www.trustix.org/errata/2006/0059/

http://www.ubuntu.com/usn/usn-369-1

http://www.ubuntu.com/usn/usn-369-2

http://www.vupen.com/english/advisories/2006/4182

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425

https://nvd.nist.gov/vuln/detail/CVE-2006-5540

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5540

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5540

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2006-5540