Description

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.

Remediation

References

CVE-2007-4769

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2007-0287)

WebLogic CVE-2023-22031 Vulnerability (CVE-2023-22031)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0702)

GlassFish CVE-2018-3210 Vulnerability (CVE-2018-3210)

MySQL CVE-2018-2813 Vulnerability (CVE-2018-2813)

Severity

Medium

Classification

CVE-2007-4769

Tags

Missing Update Known Vulnerabilities