Description
backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | postgresql +9 | 8.1.8-1.el5 | RHSA-2007:0068 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | postgresql +9 | 8.1.7-3.el4s1.1 | RHSA-2007:0067 |
Advisories 2
- RHSA-2007:0068 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0067 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- MDKSA-2006:194 vendor-advisory
- USN-369-2 vendor-advisory
- 1017115 vdb-entry
- http://projects.commandprompt.com/public/pgsql/changeset/26457
- RHSA-2007:0068 vendor-advisory
- ADV-2006-4182 vdb-entry
- 22606 third-party-advisory
- http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html
- http://www.postgresql.org/about/news.664
- oval:org.mitre.oval:def:10905 vdb-entry signature
- 23048 third-party-advisory
- 24577 third-party-advisory
- SUSE-SR:2006:027 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm
- 23132 third-party-advisory
- USN-369-1 vendor-advisory
- 22636 third-party-advisory
- RHSA-2007:0067 vendor-advisory
- 2006-0059 vendor-advisory
- 22562 third-party-advisory
- 22584 third-party-advisory
- 20717 vdb-entry