CVE-2007-4772 The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a d...
MediumCVSS 4.0
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql | >= 7.4, < 7.4.19 | 7.4.19 |
| postgresql | >= 8.0, < 8.0.15 | 8.0.15 |
| postgresql | >= 8.1, < 8.1.11 | 8.1.11 |
| postgresql | >= 8.2, < 8.2.6 | 8.2.6 |
| tcltk | < 8.4.17 | 8.4.17 |
| debian linux | = 3.1 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
References
- SSRT080006 broken-link vendor-advisory
- kb.juniper.net third-party-advisory
- SUSE-SA:2008:005 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0531 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:0539 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:0555 third-party-advisory vendor-advisory
- openSUSE-SU-2016:0578 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:0677 mailing-list third-party-advisory vendor-advisory
- RHSA-2013:0122 third-party-advisory vendor-advisory
- 28359 third-party-advisory
- 28376 third-party-advisory
- 28437 third-party-advisory
- 28438 third-party-advisory
- 28454 third-party-advisory
- 28455 third-party-advisory
- 28464 third-party-advisory
- 28477 third-party-advisory
- 28479 third-party-advisory
- 28679 third-party-advisory
- 28698 third-party-advisory
- 29070 third-party-advisory
- 29248 third-party-advisory
- 29638 third-party-advisory
- 30535 third-party-advisory
- GLSA-200801-15 third-party-advisory vendor-advisory
- 1019157 third-party-advisory vdb-entry
- sourceforge.net third-party-advisory
- sourceforge.net exploit third-party-advisory
- 103197 broken-link vendor-advisory
- 200559 broken-link vendor-advisory
- DSA-1460 third-party-advisory vendor-advisory
- DSA-1463 third-party-advisory vendor-advisory
- MDVSA-2008:004 third-party-advisory vendor-advisory
- MDVSA-2008:059 third-party-advisory vendor-advisory
- www.postgresql.org vendor-advisory
- RHSA-2008:0038 third-party-advisory vendor-advisory
- RHSA-2008:0040 third-party-advisory vendor-advisory
- RHSA-2008:0134 third-party-advisory vendor-advisory
- 20080107 PostgreSQL 2007-01-07 Cumulative Security Release mailing-list third-party-advisory vdb-entry
- 20080115 rPSA-2008-0016-1 postgresql postgresql-server mailing-list third-party-advisory vdb-entry
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues mailing-list third-party-advisory vdb-entry
- 27163 patch third-party-advisory vdb-entry
- www.vmware.com third-party-advisory
- ADV-2008-0061 third-party-advisory vdb-entry
- ADV-2008-0109 third-party-advisory vdb-entry
- ADV-2008-1071 third-party-advisory vdb-entry
- ADV-2008-1744 broken-link vdb-entry
- postgresql-regular-expression-dos(39497) third-party-advisory vdb-entry
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:11569 signature third-party-advisory vdb-entry
- USN-568-1 third-party-advisory vendor-advisory
- FEDORA-2008-0478 third-party-advisory vendor-advisory
- FEDORA-2008-0552 third-party-advisory vendor-advisory