CVE-2007-0556

Published: Feb 6, 2007Modified: Apr 23, 2026

6.6

Vector

AV:N/AC:H/Au:S/C:C/I:N/A:C

Exploitability: 3.9 / Impact: 9.2

Source: NVD

Description

The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.

Affected (92)

Products: Postgresql: Postgresql

Postgresql

1 product

Postgresql

Configuration A

92 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 1.01
Postgresql Postgresql	Version 1.02
Postgresql Postgresql	Version 1.09
Postgresql Postgresql	Version 1.0
Postgresql Postgresql	Version 6.0
Postgresql Postgresql	Version 6.1.1
Postgresql Postgresql	Version 6.1
Postgresql Postgresql	Version 6.2.1
Postgresql Postgresql	Version 6.2
Postgresql Postgresql	Version 6.3.1
Postgresql Postgresql	Version 6.3.2
Postgresql Postgresql	Version 6.3
Postgresql Postgresql	Version 6.4.1
Postgresql Postgresql	Version 6.4.2
Postgresql Postgresql	Version 6.4
Postgresql Postgresql	Version 6.5.1
Postgresql Postgresql	Version 6.5.2
Postgresql Postgresql	Version 6.5.3
Postgresql Postgresql	Version 6.5
Postgresql Postgresql	Version 7.0.1
Postgresql Postgresql	Version 7.0.2
Postgresql Postgresql	Version 7.0.3
Postgresql Postgresql	Version 7.0
Postgresql Postgresql	Version 7.1.1
Postgresql Postgresql	Version 7.1.2
Postgresql Postgresql	Version 7.1.3
Postgresql Postgresql	Version 7.1
Postgresql Postgresql	Version 7.2.1
Postgresql Postgresql	Version 7.2.2
Postgresql Postgresql	Version 7.2.3
Postgresql Postgresql	Version 7.2.4
Postgresql Postgresql	Version 7.2.5
Postgresql Postgresql	Version 7.2.6
Postgresql Postgresql	Version 7.2.7
Postgresql Postgresql	Version 7.2.8
Postgresql Postgresql	Version 7.2
Postgresql Postgresql	Version 7.3.10
Postgresql Postgresql	Version 7.3.11
Postgresql Postgresql	Version 7.3.12
Postgresql Postgresql	Version 7.3.13
Postgresql Postgresql	Version 7.3.14
Postgresql Postgresql	Version 7.3.15
Postgresql Postgresql	Version 7.3.16
Postgresql Postgresql	Version 7.3.17
Postgresql Postgresql	Version 7.3.18
Postgresql Postgresql	Version 7.3.1
Postgresql Postgresql	Version 7.3.2
Postgresql Postgresql	Version 7.3.3
Postgresql Postgresql	Version 7.3.4
Postgresql Postgresql	Version 7.3.5
Postgresql Postgresql	Version 7.3.6
Postgresql Postgresql	Version 7.3.7
Postgresql Postgresql	Version 7.3.8
Postgresql Postgresql	Version 7.3.9
Postgresql Postgresql	Version 7.3
Postgresql Postgresql	Version 7.4.10
Postgresql Postgresql	Version 7.4.11
Postgresql Postgresql	Version 7.4.12
Postgresql Postgresql	Version 7.4.13
Postgresql Postgresql	Version 7.4.14
Postgresql Postgresql	Version 7.4.15
Postgresql Postgresql	Version 7.4.16
Postgresql Postgresql	Version 7.4.1
Postgresql Postgresql	Version 7.4.2
Postgresql Postgresql	Version 7.4.3
Postgresql Postgresql	Version 7.4.4
Postgresql Postgresql	Version 7.4.5
Postgresql Postgresql	Version 7.4.6
Postgresql Postgresql	Version 7.4.7
Postgresql Postgresql	Version 7.4.8
Postgresql Postgresql	Version 7.4.9
Postgresql Postgresql	Version 7.4
Postgresql Postgresql	Version 8.0.10
Postgresql Postgresql	Version 8.0.1
Postgresql Postgresql	Version 8.0.2
Postgresql Postgresql	Version 8.0.3
Postgresql Postgresql	Version 8.0.4
Postgresql Postgresql	Version 8.0.5
Postgresql Postgresql	Version 8.0.6
Postgresql Postgresql	Version 8.0.7
Postgresql Postgresql	Version 8.0.8
Postgresql Postgresql	Version 8.0.9
Postgresql Postgresql	Version 8.0
Postgresql Postgresql	Version 8.1.1
Postgresql Postgresql	Version 8.1.2
Postgresql Postgresql	Version 8.1.3
Postgresql Postgresql	Version 8.1.4
Postgresql Postgresql	Version 8.1.5
Postgresql Postgresql	Version 8.1.6
Postgresql Postgresql	Version 8.1
Postgresql Postgresql	Version 8.2.1
Postgresql Postgresql	Version 8.2

References (68)

http://fedoranews.org/cms/node/2554

Source: cve@mitre.org

http://lists.rpath.com/pipermail/security-announce/2007-February/000141.html

Source: cve@mitre.org

http://osvdb.org/33302

Source: cve@mitre.org

http://secunia.com/advisories/24028

Source: cve@mitre.org

http://secunia.com/advisories/24033

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/24042

Source: cve@mitre.org

http://secunia.com/advisories/24050

Source: cve@mitre.org

http://secunia.com/advisories/24057

Source: cve@mitre.org

http://secunia.com/advisories/24151

Source: cve@mitre.org

http://secunia.com/advisories/24315

Source: cve@mitre.org

http://secunia.com/advisories/24513

Source: cve@mitre.org

http://secunia.com/advisories/24577

Source: cve@mitre.org

http://secunia.com/advisories/25220

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200703-15.xml

Source: cve@mitre.org

http://securitytracker.com/id?1017597

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102825-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:037

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_10_sr.html

Source: cve@mitre.org

http://www.postgresql.org/support/security

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0067.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0068.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/459280/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/459448/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22387

Source: cve@mitre.org

http://www.trustix.org/errata/2007/0007

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-417-2

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0478

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0774

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32191

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1025

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-830

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11353

Source: cve@mitre.org

https://usn.ubuntu.com/417-1/

Source: cve@mitre.org

http://fedoranews.org/cms/node/2554