Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3,…

Description

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

Scores

EPSS (exploitation in 30 days)

4.6% · top 8.3% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Weakness

• n/a
• CWE-189 (opens in a new tab)All about CWE-189 and its CVEs

Affected products

• n/a

  • affected n/a

References (29)

• ADV-2011-0283 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 70740 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43144 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• HPSBMU02781 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• RHSA-2011:0198 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• FEDORA-2011-0990 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• RHSA-2011:0197 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• http://www.postgresql.org/about/news.1289 (opens in a new tab)x_refsource_CONFIRMx_transferred
• ADV-2011-0349 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 43187 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SUSE-SR:2011:005 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• USN-1058-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• MDVSA-2011:021 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• ADV-2011-0262 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• ADV-2011-0303 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• DSA-2157 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• ADV-2011-0287 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 43155 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 43154 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 43188 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.postgresql.org/support/security (opens in a new tab)x_refsource_CONFIRMx_transferred
• 46084 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• postgresql-gettoken-buffer-overflow(65060) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 43240 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commitdiff%3Bh=7ccb6dc2d3e266a551827bb99179708580f72431 (opens in a new tab)x_refsource_CONFIRMx_transferred
• FEDORA-2011-0963 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 (opens in a new tab)x_refsource_CONFIRMx_transferred
• ADV-2011-0278 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• ADV-2011-0299 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2010-4015](https://trackcve.app/badge/CVE-2010-4015.svg)](https://trackcve.app/cve/CVE-2010-4015)

Record last updated 7 Aug 2024, 03:26 UTC.