SB2023011948 - Input validation error in PostgreSQL



SB2023011948 - Input validation error in PostgreSQL

Published: January 19, 2023 Updated: June 23, 2025

Security Bulletin ID SB2023011948
Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Input validation error (CVE-ID: CVE-2007-0555)

The vulnerability allows a remote user to read data or crash the application.

PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.


Remediation

Install update from vendor's website.

References