Description
backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | postgresql +9 | 8.1.8-1.el5 | RHSA-2007:0068 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | postgresql +9 | 8.1.7-3.el4s1.1 | RHSA-2007:0067 |
Advisories 2
- RHSA-2007:0068 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0067 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- MDKSA-2006:194 vendor-advisory
- USN-369-2 vendor-advisory
- 1017115 vdb-entry
- RHSA-2007:0068 vendor-advisory
- ADV-2006-4182 vdb-entry
- 22606 third-party-advisory
- http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html
- http://www.postgresql.org/about/news.664
- oval:org.mitre.oval:def:10122 vdb-entry signature
- 23048 third-party-advisory
- 24577 third-party-advisory
- SUSE-SR:2006:027 vendor-advisory
- http://projects.commandprompt.com/public/pgsql/changeset/25953
- http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm
- 23132 third-party-advisory
- USN-369-1 vendor-advisory
- 22636 third-party-advisory
- RHSA-2007:0067 vendor-advisory
- 2006-0059 vendor-advisory
- 22562 third-party-advisory
- 22584 third-party-advisory
- 20717 vdb-entry