Description
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | postgresql-8.4 | 8.4.7-0squeeze2 | DSA-2157-1 |
| Debian 5.0 | postgresql-8.3 | 8.3.14-0lenny1 | DSA-2157-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | postgresql +9 | 8.4.7-1.el6_0.1 | RHSA-2011:0197 |
| RHEL 5 | postgresql +9 | 8.1.23-1.el5_6.1 | RHSA-2011:0197 |
| RHEL 5 | postgresql84 +11 | 8.4.7-1.el5_6.1 | RHSA-2011:0198 |
| RHEL 4 | postgresql +10 | 7.4.30-1.el4_8.2 | RHSA-2011:0197 |
Advisories 3
- RHSA-2011:0197 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2157-1 postgresql-8.3 - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2011:0198 Red Hat Security Advisory: postgresql84 security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- ADV-2011-0283 vdb-entry
- 70740 vdb-entry
- 43144 third-party-advisory
- HPSBMU02781 vendor-advisory
- RHSA-2011:0198 vendor-advisory
- FEDORA-2011-0990 vendor-advisory
- RHSA-2011:0197 vendor-advisory
- http://www.postgresql.org/about/news.1289
- ADV-2011-0349 vdb-entry
- 43187 third-party-advisory
- SUSE-SR:2011:005 vendor-advisory
- USN-1058-1 vendor-advisory
- MDVSA-2011:021 vendor-advisory
- ADV-2011-0262 vdb-entry
- ADV-2011-0303 vdb-entry
- DSA-2157 vendor-advisory
- ADV-2011-0287 vdb-entry
- 43155 third-party-advisory
- 43154 third-party-advisory
- 43188 third-party-advisory
- http://www.postgresql.org/support/security
- 46084 vdb-entry
- postgresql-gettoken-buffer-overflow(65060) vdb-entry
- 43240 third-party-advisory
- http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commitdiff%3Bh=7ccb6dc2d3e266a551827bb99179708580f72431
- FEDORA-2011-0963 vendor-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- ADV-2011-0278 vdb-entry
- ADV-2011-0299 vdb-entry