Description

PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.

Remediation

References

CVE-2012-2655

Related Vulnerabilities

WordPress Plugin Stock in & out Cross-Site Scripting (1.0.4)

MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-9067)

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-36098)

WordPress Plugin GoCodes Multiple Vulnerabilities (1.3.5)

MySQL CVE-2016-5631 Vulnerability (CVE-2016-5631)

Severity

Medium

Classification

CVE-2012-2655

Tags

Missing Update Known Vulnerabilities