Description

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Remediation

References

CVE-2006-5540

Related Vulnerabilities

Oracle Application Server CVE-2008-1824 Vulnerability (CVE-2008-1824)

Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2020-15842)

WordPress Plugin WP FuneralPress Multiple Cross-Site Scripting Vulnerabilities (1.1.6)

WordPress Plugin Loco Translate Local File Inclusion (2.2.1)

Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-39582)

Severity

Medium

Classification

CVE-2006-5540

Tags

Missing Update Known Vulnerabilities