Tracker / CVE-2015-0242
CVE-2015-0242
High 8.8
Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1, when running on a Windows system, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a floating point number with a large precision, as demonstrated by using the to_char function.
Affected products and versions
| debian | debian_linux |
|---|---|
| postgresql | postgresql · … → 9.0.19 |
| postgresql | postgresql · 9.1.0 → 9.1.15 |
| postgresql | postgresql · 9.2.0 → 9.2.10 |
| postgresql | postgresql · 9.3.0 → 9.3.6 |
| postgresql | postgresql · 9.4.0 → 9.4.1 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.