Description
The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | postgresql +10 | 7.4.7-2.RHEL4.1 | RHSA-2005:138 |
| RHEL 3 | rh-postgresql +10 | 7.3.9-2 | RHSA-2005:141 |
Advisories 2
- RHSA-2005:141 Red Hat Security Advisory: rh-postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:138 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- [pgsql-committers] 20050127 pgsql: Fix security and 64-bit issues in contrib/intagg. mailing-list
- MDKSA-2005:040 vendor-advisory
- 20050210 [USN-79-1] PostgreSQL vulnerabilities mailing-list
- postgresql-contribintagg-dos(19185) vdb-entry
- RHSA-2005:138 vendor-advisory
- 12948 third-party-advisory
- oval:org.mitre.oval:def:10148 vdb-entry signature
- 12417 vdb-entry
- SUSE-SA:2005:036 vendor-advisory