← Back

CVE-2005-0247

nvd nist
Published: May 2, 2005Modified: Apr 16, 2026

JSON object

Loading...
6.5
Vector
AV:N/AC:L/Au:S/C:P/I:P/A:P
Exploitability: 8.0 / Impact: 6.4
Source: NVD

Description

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.

Affected (28)

1 product
Postgresql
Configuration A
28 vulnerable
Vulnerable SoftwareAffected Versions
Postgresql
Version 7.2.1
Version 7.2.2
Version 7.2.3
Version 7.2.4
Version 7.2.5
Version 7.2.6
Version 7.2.7
Version 7.2
Version 7.3.1
Version 7.3.2
Version 7.3.3
Version 7.3.4
Version 7.3.5
Version 7.3.6
Version 7.3.7
Version 7.3.8
Version 7.3.9
Version 7.3
Version 7.4.1
Version 7.4.2
Version 7.4.3
Version 7.4.4
Version 7.4.5
Version 7.4.6
Version 7.4.7
Version 7.4
Version 8.0.0
Version 8.0.1

References (30)

Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.