Description

The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.

Remediation

References

CVE-2014-0066

Related Vulnerabilities

WordPress Other Vulnerability (CVE-2007-1409)

WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.1)

WordPress 4.6 Multiple Vulnerabilities (4.6)

Apache HTTP Server CVE-2002-0839 Vulnerability (CVE-2002-0839)

Joomla Improper Certificate Validation Vulnerability (CVE-2017-11364)

Severity

Medium

Classification

CVE-2014-0066 CWE-20

Tags

Missing Update Known Vulnerabilities