CVE-2010-0442
NoneCVSS
—
EPSS
13.3%
Published
Feb 2, 2010
CISA due date
—
The record
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:5.0 | postgresql-8.3 | 0 | 8.3.11-0lenny1 |
| Red Hat:enterprise_linux:3::as | rh-postgresql | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-contrib | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-debuginfo | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-devel | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-docs | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-jdbc | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-libs | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-pl | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-python | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-server | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-tcl | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::as | rh-postgresql-test | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-contrib | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-debuginfo | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-devel | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-docs | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-jdbc | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-libs | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-pl | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-python | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-server | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-tcl | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::desktop | rh-postgresql-test | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-contrib | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-debuginfo | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-devel | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-docs | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-jdbc | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-libs | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-pl | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-python | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-server | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-tcl | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::es | rh-postgresql-test | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-contrib | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-debuginfo | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-devel | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-docs | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-jdbc | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-libs | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-pl | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-python | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-server | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-tcl | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:3::ws | rh-postgresql-test | 0 | 0:7.3.21-3 |
| Red Hat:enterprise_linux:4::as | postgresql | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-contrib | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-debuginfo | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-devel | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-docs | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-jdbc | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-libs | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-pl | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-python | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-server | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-tcl | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | postgresql-test | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-contrib | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-debuginfo | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-devel | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-docs | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-jdbc | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-libs | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-pl | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-python | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-server | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-tcl | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | postgresql-test | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-contrib | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-debuginfo | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-devel | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-docs | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-jdbc | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-libs | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-pl | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-python | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-server | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-tcl | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | postgresql-test | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-contrib | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-debuginfo | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-devel | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-docs | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-jdbc | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-libs | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-pl | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-python | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-server | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-tcl | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | postgresql-test | 0 | 0:7.4.29-1.el4_8.1 |
| Red Hat:enterprise_linux:5::client | postgresql | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-contrib | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-debuginfo | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-devel | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-docs | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-libs | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-pl | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-python | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-server | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-tcl | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client | postgresql-test | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-contrib | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-debuginfo | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-devel | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-docs | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-libs | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-pl | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-python | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-server | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-tcl | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::client_workstation | postgresql-test | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-contrib | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-debuginfo | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-devel | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-docs | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-libs | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-pl | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-python | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-server | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-tcl | 0 | 0:8.1.21-1.el5_5.1 |
| Red Hat:enterprise_linux:5::server | postgresql-test | 0 | 0:8.1.21-1.el5_5.1 |
Related vulnerabilities
- CVE-2005-0245 Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute… Also affects rh-postgresql
- CVE-2009-0922 PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated… Also affects postgresql
- CVE-2026-102621 A vulnerability was identified in Freedesktop Poppler up to 26.08.0. CWE-189
- CVE-2026-102620 A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. CWE-189
- CVE-2026-93314 A vulnerability was determined in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-93313 A vulnerability was found in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-93311 A vulnerability was detected in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-86297 A vulnerability was identified in D-Link DIR-605 B1v202WWB03. CWE-189