CVE-2014-0064

Severity CVSS v4.0:

Pending analysis

Type:

CWE-189 Numeric Errors

Publication date:

31/03/2014

Last modified:

12/04/2025

Description

Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, which trigger a buffer overflow. NOTE: this identifier has been SPLIT due to different affected versions; use CVE-2014-2669 for the hstore vector.

Impact

Vector 2.0

AV:N/AC:L/Au:S/C:P/I:P/A:P CVSS v2.0 Severity and Metrics:

Base Score: 6.50 MEDIUM
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): Single
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): Physical

Base Score 2.0

6.50

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:postgresql:postgresql::::::::		8.4.19 (including)
cpe:2.3:a:postgresql:postgresql:8.4.1:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.2:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.3:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.4:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.5:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.6:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.7:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.8:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.9:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.10:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.11:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.12:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.13:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.14:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:a:postgresql:postgresql::::::::		8.4.19 (including)
cpe:2.3:a:postgresql:postgresql:8.4.1:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.2:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.3:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.4:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.5:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.6:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.7:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.8:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.9:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.10:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.11:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.12:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.13:::::::*
cpe:2.3:a:postgresql:postgresql:8.4.14:::::::*

CVE-2014-0064

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools