Description
EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which triggers use of an uninitialized pointer.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhx Enterprisedb Advanced Server 7 | EnterpriseDB | 8.1.9.27-1 | RHSA-2007:0895 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- EnterpriseDB Advanced Server 8.2 - Uninitialized Pointer EDB-30542 · dos · Aug 29, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- RHSA-2007:0895 Red Hat Security Advisory: EnterpriseDB security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- 20070829 EnterpriseDB Advanced Server 8.2 Unitialized Pointer mailing-list
- 25481 vdb-entry
- enterprisedb-debugging-code-execution(36328) vdb-entry
- ADV-2007-3040 vdb-entry
- 26640 third-party-advisory