Input validation error in PostgreSQL

1) Input validation error

EUVDB-ID: #VU45396

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2010-4015

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote #AU# to read and manipulate data.

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PostgreSQL: 8.2 - 9.0.2

CPE2.3

• cpe:2.3:a:postgresql_global_development_group:postgresql:8.2.19:*:*:*:*:*:*:*
• cpe:2.3:a:postgresql_global_development_group:postgresql:8.3.13:*:*:*:*:*:*:*
• cpe:2.3:a:postgresql_global_development_group:postgresql:8.4.6:*:*:*:*:*:*:*
• cpe:2.3:a:postgresql_global_development_group:postgresql:9.0.2:*:*:*:*:*:*:*

External links

https://git.postgresql.org/gitweb?p=postgresql.git;a=commitdiff;h=7ccb6dc2d3e266a551827bb99179708580f72431
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
https://lists.fedoraproject.org/pipermail/package-announce/2011-February/053817.html
https://lists.fedoraproject.org/pipermail/package-announce/2011-February/053888.html
https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
https://marc.info/?l=bugtraq&m=134124585221119&w=2
https://osvdb.org/70740
https://secunia.com/advisories/43144
https://secunia.com/advisories/43154
https://secunia.com/advisories/43155
https://secunia.com/advisories/43187
https://secunia.com/advisories/43188
https://secunia.com/advisories/43240
https://www.debian.org/security/2011/dsa-2157
https://www.mandriva.com/security/advisories?name=MDVSA-2011:021
https://www.postgresql.org/about/news.1289
https://www.postgresql.org/support/security
https://www.redhat.com/support/errata/RHSA-2011-0197.html
https://www.redhat.com/support/errata/RHSA-2011-0198.html
https://www.securityfocus.com/bid/46084
https://www.ubuntu.com/usn/USN-1058-1
https://www.vupen.com/english/advisories/2011/0262
https://www.vupen.com/english/advisories/2011/0278
https://www.vupen.com/english/advisories/2011/0283
https://www.vupen.com/english/advisories/2011/0287
https://www.vupen.com/english/advisories/2011/0299
https://www.vupen.com/english/advisories/2011/0303
https://www.vupen.com/english/advisories/2011/0349
https://exchange.xforce.ibmcloud.com/vulnerabilities/65060

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.