CVE-2006-5540

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/10/2006
Last modified:
09/04/2025

Description

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:postgresql:postgresql:6.3.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:6.5.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.1.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.1.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.1.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.2.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.2.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.2.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:7.3:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools