Novell Home

CVE-2009-0922

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2009-0922 at MITRE

Description

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

Novell Bugzilla entry: 486347, 603967

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 10 SP2 for x86
  • postgresql-devel >= 8.1.17-0.3
  • postgresql-libs >= 8.1.17-0.3
 sled10-sp2.x86
sles10-sp2.x86
sle10-sp2-sdk.x86-64
sle10-sp2-sdk.s390x
sles10-sp2.ppc
sles10-sp2.x86-64
sles10-sp2.s390x
sle10-sp2-sdk.x86
sled10-sp2.x86-64
sle10-sp2-sdk.ia64
sle10-sp2-sdk.ppc
sles10-sp2.ia64
ZYPP Patch Nr: 6114
SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T
  • postgresql-devel >= 8.1.17-0.3
  • postgresql-libs >= 8.1.17-0.3
  • postgresql-libs-32bit >= 8.1.17-0.3
 sled10-sp2.x86
sles10-sp2.x86
sle10-sp2-sdk.x86-64
sle10-sp2-sdk.s390x
sles10-sp2.ppc
sles10-sp2.x86-64
sles10-sp2.s390x
sle10-sp2-sdk.x86
sled10-sp2.x86-64
sle10-sp2-sdk.ia64
sle10-sp2-sdk.ppc
sles10-sp2.ia64
ZYPP Patch Nr: 6114
SUSE Linux Enterprise Server 10 SP2 for x86
  • postgresql >= 8.1.17-0.3
  • postgresql-contrib >= 8.1.17-0.3
  • postgresql-devel >= 8.1.17-0.3
  • postgresql-docs >= 8.1.17-0.3
  • postgresql-libs >= 8.1.17-0.3
  • postgresql-server >= 8.1.17-0.3
 sled10-sp2.x86
sles10-sp2.x86
sle10-sp2-sdk.x86-64
sle10-sp2-sdk.s390x
sles10-sp2.ppc
sles10-sp2.x86-64
sles10-sp2.s390x
sle10-sp2-sdk.x86
sled10-sp2.x86-64
sle10-sp2-sdk.ia64
sle10-sp2-sdk.ppc
sles10-sp2.ia64
ZYPP Patch Nr: 6114
SUSE Linux Enterprise Server 10 SP2 for IPF
  • postgresql >= 8.1.17-0.3
  • postgresql-contrib >= 8.1.17-0.3
  • postgresql-devel >= 8.1.17-0.3
  • postgresql-docs >= 8.1.17-0.3
  • postgresql-libs >= 8.1.17-0.3
  • postgresql-libs-x86 >= 8.1.17-0.3
  • postgresql-server >= 8.1.17-0.3
 sled10-sp2.x86
sles10-sp2.x86
sle10-sp2-sdk.x86-64
sle10-sp2-sdk.s390x
sles10-sp2.ppc
sles10-sp2.x86-64
sles10-sp2.s390x
sle10-sp2-sdk.x86
sled10-sp2.x86-64
sle10-sp2-sdk.ia64
sle10-sp2-sdk.ppc
sles10-sp2.ia64
ZYPP Patch Nr: 6114
SUSE Linux Enterprise Server 10 SP2 for IBM POWER
  • postgresql >= 8.1.17-0.3
  • postgresql-contrib >= 8.1.17-0.3
  • postgresql-devel >= 8.1.17-0.3
  • postgresql-docs >= 8.1.17-0.3
  • postgresql-libs >= 8.1.17-0.3
  • postgresql-libs-64bit >= 8.1.17-0.3
  • postgresql-server >= 8.1.17-0.3
 sled10-sp2.x86
sles10-sp2.x86
sle10-sp2-sdk.x86-64
sle10-sp2-sdk.s390x
sles10-sp2.ppc
sles10-sp2.x86-64
sles10-sp2.s390x
sle10-sp2-sdk.x86
sled10-sp2.x86-64
sle10-sp2-sdk.ia64
sle10-sp2-sdk.ppc
sles10-sp2.ia64
ZYPP Patch Nr: 6114
SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit
  • postgresql >= 8.1.17-0.3
  • postgresql-contrib >= 8.1.17-0.3
  • postgresql-devel >= 8.1.17-0.3
  • postgresql-docs >= 8.1.17-0.3
  • postgresql-libs >= 8.1.17-0.3
  • postgresql-libs-32bit >= 8.1.17-0.3
  • postgresql-server >= 8.1.17-0.3
 sled10-sp2.x86
sles10-sp2.x86
sle10-sp2-sdk.x86-64
sle10-sp2-sdk.s390x
sles10-sp2.ppc
sles10-sp2.x86-64
sles10-sp2.s390x
sle10-sp2-sdk.x86
sled10-sp2.x86-64
sle10-sp2-sdk.ia64
sle10-sp2-sdk.ppc
sles10-sp2.ia64
ZYPP Patch Nr: 6114
Novell Linux Desktop 9 for x86
Novell Linux POS 9
Open Enterprise Server
SUSE CORE 9 for IBM S/390 31bit
SUSE CORE 9 for x86
  • postgresql >= 7.4.25-0.1
  • postgresql-contrib >= 7.4.25-0.1
  • postgresql-devel >= 7.4.25-0.1
  • postgresql-docs >= 7.4.25-0.1
  • postgresql-libs >= 7.4.25-0.1
  • postgresql-server >= 7.4.25-0.1
 core9.s390x
sles9-nlpos.x86
sles9-nld.x86
core9.x86
core9.s390
sles9-oes.x86
core9.ia64
sles9-nld.x86-64
core9.x86-64
core9.ppc
YOU Patch Nr: 12383
SUSE CORE 9 for Itanium Processor Family
  • postgresql >= 7.4.25-0.1
  • postgresql-contrib >= 7.4.25-0.1
  • postgresql-devel >= 7.4.25-0.1
  • postgresql-docs >= 7.4.25-0.1
  • postgresql-libs >= 7.4.25-0.1
  • postgresql-libs-x86 >= 9-200903241522
  • postgresql-server >= 7.4.25-0.1
 core9.s390x
sles9-nlpos.x86
sles9-nld.x86
core9.x86
core9.s390
sles9-oes.x86
core9.ia64
sles9-nld.x86-64
core9.x86-64
core9.ppc
YOU Patch Nr: 12383
SUSE CORE 9 for IBM POWER
  • postgresql >= 7.4.25-0.1
  • postgresql-contrib >= 7.4.25-0.1
  • postgresql-devel >= 7.4.25-0.1
  • postgresql-docs >= 7.4.25-0.1
  • postgresql-libs >= 7.4.25-0.1
  • postgresql-libs-64bit >= 9-200903241530
  • postgresql-server >= 7.4.25-0.1
 core9.s390x
sles9-nlpos.x86
sles9-nld.x86
core9.x86
core9.s390
sles9-oes.x86
core9.ia64
sles9-nld.x86-64
core9.x86-64
core9.ppc
YOU Patch Nr: 12383
SUSE CORE 9 for IBM zSeries 64bit
  • postgresql >= 7.4.25-0.1
  • postgresql-contrib >= 7.4.25-0.1
  • postgresql-devel >= 7.4.25-0.1
  • postgresql-docs >= 7.4.25-0.1
  • postgresql-libs >= 7.4.25-0.1
  • postgresql-libs-32bit >= 9-200903241519
  • postgresql-server >= 7.4.25-0.1
 core9.s390x
sles9-nlpos.x86
sles9-nld.x86
core9.x86
core9.s390
sles9-oes.x86
core9.ia64
sles9-nld.x86-64
core9.x86-64
core9.ppc
YOU Patch Nr: 12383
Novell Linux Desktop 9 for x86_64
SUSE CORE 9 for AMD64 and Intel EM64T
  • postgresql >= 7.4.25-0.1
  • postgresql-contrib >= 7.4.25-0.1
  • postgresql-devel >= 7.4.25-0.1
  • postgresql-docs >= 7.4.25-0.1
  • postgresql-libs >= 7.4.25-0.1
  • postgresql-libs-32bit >= 9-200903241522
  • postgresql-server >= 7.4.25-0.1
 core9.s390x
sles9-nlpos.x86
sles9-nld.x86
core9.x86
core9.s390
sles9-oes.x86
core9.ia64
sles9-nld.x86-64
core9.x86-64
core9.ppc
YOU Patch Nr: 12383
openSUSE 10.3
  • postgresql >= 8.2.13-0.1
  • postgresql-contrib >= 8.2.13-0.1
  • postgresql-devel >= 8.2.13-0.1
  • postgresql-docs >= 8.2.13-0.1
  • postgresql-libs >= 8.2.13-0.1
  • postgresql-libs-32bit >= 8.2.13-0.1
  • postgresql-libs-64bit >= 8.2.13-0.1
  • postgresql-server >= 8.2.13-0.1

List of products where fixes are in QA

© 2012 Novell