CVE-2007-4772

Published: Jan 9, 2008Modified: Apr 23, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

Affected (10)

Products: Postgresql: Postgresql · Tcl: Tcl/tk · Debian: Debian Linux · +1 more

Show all products

Postgresql: Postgresql · Tcl: Tcl/tk · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	From 7.4 to 7.4.19
Postgresql Postgresql	From 8.0 to 8.0.15
Postgresql Postgresql	From 8.1 to 8.1.11
Postgresql Postgresql	From 8.2 to 8.2.6
Tcl Tcl/tk	Before 8.4.17

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10

Related CWEs

CWE-399

References (106)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154

Source: cve@mitre.org

Broken Link

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-0122.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28359

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28376

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28437

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28438

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28454

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28455

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28464

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28477

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28479

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28679

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28698

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29070

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29248

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29638

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/30535

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200801-15.xml

Source: cve@mitre.org

Third Party Advisory

http://securitytracker.com/id?1019157

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894

Source: cve@mitre.org

Third Party Advisory

http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894

Source: cve@mitre.org

ExploitThird Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1

Source: cve@mitre.org

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2008/dsa-1460

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2008/dsa-1463

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:004

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:059

Source: cve@mitre.org

Third Party Advisory

http://www.postgresql.org/about/news.905

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-0038.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0040.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0134.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/485864/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/486407/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/493080/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/27163

Source: cve@mitre.org

PatchThird Party AdvisoryVDB Entry

http://www.vmware.com/security/advisories/VMSA-2008-0009.html

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0061

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0109

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1071/references

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1744

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/39497

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-1768

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/568-1/

Source: cve@mitre.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html

Source: cve@mitre.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html

Source: cve@mitre.org

Third Party Advisory

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154