Description
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | postgresql +9 | 8.1.8-1.el5 | RHSA-2007:0068 |
| RHEL 4 | postgresql +10 | 7.4.16-1.RHEL4.1 | RHSA-2007:0064 |
| RHEL 3 | rh-postgresql +10 | 7.3.18-1 | RHSA-2007:0064 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | postgresql +9 | 8.1.7-3.el4s1.1 | RHSA-2007:0067 |
Advisories 3
- RHSA-2007:0068 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0064 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0067 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- MDKSA-2006:194 vendor-advisory
- USN-369-2 vendor-advisory
- 1017115 vdb-entry
- http://projects.commandprompt.com/public/pgsql/changeset/25504
- RHSA-2007:0068 vendor-advisory
- ADV-2006-4182 vdb-entry
- 22606 third-party-advisory
- http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html
- http://www.postgresql.org/about/news.664
- 24284 third-party-advisory
- 23048 third-party-advisory
- 24577 third-party-advisory
- SUSE-SR:2006:027 vendor-advisory
- oval:org.mitre.oval:def:11425 vdb-entry signature
- http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm
- 23132 third-party-advisory
- USN-369-1 vendor-advisory
- 22636 third-party-advisory
- RHSA-2007:0064 vendor-advisory
- RHSA-2007:0067 vendor-advisory
- 2006-0059 vendor-advisory
- 22562 third-party-advisory
- 22584 third-party-advisory
- 20717 vdb-entry
- 24094 third-party-advisory