PostgreSQL CVE-2014-2669 Multiple Integer Overflow Vulnerabilities

Bugtraq ID:	66557
Class:	Unknown
CVE:	CVE-2014-2669
Remote:	Yes
Local:	No
Published:	Feb 17 2014 12:00AM
Updated:	Feb 17 2014 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	PostgreSQL PostgreSQL 9.1.3 PostgreSQL PostgreSQL 9.0.7 PostgreSQL PostgreSQL 9.0.3 PostgreSQL PostgreSQL 9.0 PostgreSQL PostgreSQL 9.2 PostgreSQL PostgreSQL 9.1.4 PostgreSQL PostgreSQL 9.1 PostgreSQL PostgreSQL 9.0.8 PostgreSQL PostgreSQL 9.0.1
Not Vulnerable:

PostgreSQL CVE-2014-2669 Multiple Integer Overflow Vulnerabilities

PostgreSQL is prone to multiple integer-overflow vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.

Versions prior to PostgreSQL 9.0.16, 9.1.12, 9.2.7 and 9.3.3 are vulnerable.

PostgreSQL CVE-2014-2669 Multiple Integer Overflow Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PostgreSQL CVE-2014-2669 Multiple Integer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PostgreSQL CVE-2014-2669 Multiple Integer Overflow Vulnerabilities

References:

• PostgreSQL Homepage (PostgreSQL)