CVE-2009-0922
NoneCVSS
—
EPSS
10.2%
Published
Mar 17, 2009
CISA due date
—
The record
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:4::as | postgresql | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-contrib | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-debuginfo | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-devel | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-docs | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-jdbc | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-libs | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-pl | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-python | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-server | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-tcl | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-test | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-contrib | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-debuginfo | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-devel | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-docs | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-jdbc | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-libs | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-pl | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-python | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-server | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-tcl | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-test | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-contrib | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-debuginfo | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-devel | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-docs | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-jdbc | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-libs | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-pl | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-python | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-server | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-tcl | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-test | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-contrib | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-debuginfo | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-devel | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-docs | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-jdbc | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-libs | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-pl | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-python | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-server | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-tcl | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-test | 0 | 0:7.4.26-1.el4_8.1 |
| Red Hat:enterprise_linux:5::client | postgresql | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-contrib | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-debuginfo | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-devel | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-docs | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-libs | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-pl | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-python | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-server | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-tcl | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client | postgresql-test | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-contrib | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-debuginfo | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-devel | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-docs | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-libs | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-pl | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-python | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-server | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-tcl | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-test | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-contrib | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-debuginfo | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-devel | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-docs | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-libs | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-pl | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-python | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-server | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-tcl | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:enterprise_linux:5::server | postgresql-test | 0 | 0:8.1.18-2.el5_4.1 |
| Red Hat:rhel_application_stack:2 | httpd | 0 | 0:2.2.11-2.el5s2 |
| Red Hat:rhel_application_stack:2 | httpd-debuginfo | 0 | 0:2.2.11-2.el5s2 |
| Red Hat:rhel_application_stack:2 | httpd-devel | 0 | 0:2.2.11-2.el5s2 |
| Red Hat:rhel_application_stack:2 | httpd-manual | 0 | 0:2.2.11-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mod_jk | 0 | 0:1.2.28-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mod_jk-ap20 | 0 | 0:1.2.28-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mod_jk-debuginfo | 0 | 0:1.2.28-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mod_ssl | 0 | 1:2.2.11-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql | 0 | 0:5.0.79-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-bench | 0 | 0:5.0.79-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-cluster | 0 | 0:5.0.79-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-connector-odbc | 0 | 0:3.51.27r695-1.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-connector-odbc-debuginfo | 0 | 0:3.51.27r695-1.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-debuginfo | 0 | 0:5.0.79-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-devel | 0 | 0:5.0.79-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-libs | 0 | 0:5.0.79-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-server | 0 | 0:5.0.79-2.el5s2 |
| Red Hat:rhel_application_stack:2 | mysql-test | 0 | 0:5.0.79-2.el5s2 |
| Red Hat:rhel_application_stack:2 | perl-DBD-MySQL | 0 | 0:4.010-1.el5s2 |
| Red Hat:rhel_application_stack:2 | perl-DBD-MySQL-debuginfo | 0 | 0:4.010-1.el5s2 |
| Red Hat:rhel_application_stack:2 | perl-DBD-Pg | 0 | 0:1.49-5.el5s2 |
| Red Hat:rhel_application_stack:2 | perl-DBD-Pg-debuginfo | 0 | 0:1.49-5.el5s2 |
| Red Hat:rhel_application_stack:2 | php | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-bcmath | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-cli | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-common | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-dba | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-debuginfo | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-devel | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-gd | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-imap | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-ldap | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-mbstring | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-mysql | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-ncurses | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-odbc | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-pdo | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-pgsql | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-snmp | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-soap | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-xml | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | php-xmlrpc | 0 | 0:5.2.9-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-contrib | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-debuginfo | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-devel | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-docs | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-jdbc | 0 | 0:8.2.509-2jpp.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-jdbc-debuginfo | 0 | 0:8.2.509-2jpp.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-libs | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-plperl | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-plpython | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-pltcl | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-python | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-server | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-tcl | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresql-test | 0 | 0:8.2.13-2.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresqlclient81 | 0 | 0:8.1.17-1.el5s2 |
| Red Hat:rhel_application_stack:2 | postgresqlclient81-debuginfo | 0 | 0:8.1.17-1.el5s2 |
Related vulnerabilities
- CVE-2010-0442 The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and… Also affects postgresql
- CVE-2005-0245 Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute… Also affects postgresql
- CVE-2011-3192 The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x… Also affects httpd
- CVE-2009-3095 The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass… Also affects httpd
- CVE-2009-2446 Multiple format string vulnerabilities in the dispatch_command function in… Also affects httpd
- CVE-2009-1891 The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until… Also affects httpd
- CVE-2009-1890 The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache… Also affects httpd
- CVE-2008-2939 Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in… Also affects httpd