CVE-2012-2655

Common Vulnerabilities and Exposures

Upstream information

CVE-2012-2655 at MITRE

Description

PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.

NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

Novell Bugzilla entry: 765069

SUSE Security Advisories:

openSUSE-SU-2012:1251-1, published Wed, 26 Sep 2012 17:09:15 +0200 (CEST)
openSUSE-SU-2012:1288-1, published Thu, 4 Oct 2012 18:08:51 +0200 (CEST)
openSUSE-SU-2012:1299-1, published Sat, 6 Oct 2012 15:09:52 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SLE 11 SP1 DEBUGINFO	`postgresql-debuginfo >= 8.3.20-0.4.1` `postgresql-debugsource >= 8.3.20-0.4.1`	sles11-sp1-vmware.x86-64 sled11-sp1.x86-64 sles11-sp2.ppc sled11-sp2.x86-64 sles11-sp2.s390x sles11-sp1.x86-64 sles11-sp1.ia64 sles11-sp1.s390x sles11-sp1.ppc sled11-sp1.x86 sles11-sp2.x86 sles11-sp2.x86-64 sles11-sp1-vmware.x86 sles11-sp1.x86 sles11-sp2.ia64 sled11-sp2.x86 SAT Patch Nr: 6697
SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 11 SP2	`postgresql >= 8.3.20-0.4.1` `postgresql-init >= 9.1-0.6.10.1`	sles11-sp1-vmware.x86-64 sled11-sp1.x86-64 sles11-sp2.ppc sled11-sp2.x86-64 sles11-sp2.s390x sles11-sp1.x86-64 sles11-sp1.ia64 sles11-sp1.s390x sles11-sp1.ppc sled11-sp1.x86 sles11-sp2.x86 sles11-sp2.x86-64 sles11-sp1-vmware.x86 sles11-sp1.x86 sles11-sp2.ia64 sled11-sp2.x86 SAT Patch Nr: 6697
SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP2	`postgresql >= 8.3.20-0.4.1` `postgresql-contrib >= 8.3.20-0.4.1` `postgresql-docs >= 8.3.20-0.4.1` `postgresql-init >= 9.1-0.6.10.1` `postgresql-server >= 8.3.20-0.4.1`	sles11-sp1-vmware.x86-64 sled11-sp1.x86-64 sles11-sp2.ppc sled11-sp2.x86-64 sles11-sp2.s390x sles11-sp1.x86-64 sles11-sp1.ia64 sles11-sp1.s390x sles11-sp1.ppc sled11-sp1.x86 sles11-sp2.x86 sles11-sp2.x86-64 sles11-sp1-vmware.x86 sles11-sp1.x86 sles11-sp2.ia64 sled11-sp2.x86 SAT Patch Nr: 6697
SUSE Linux Enterprise Desktop 10 SP4 for x86	`postgresql-devel >= 8.1.23-0.11.1` `postgresql-libs >= 8.1.23-0.11.1`	sle10-sp4-sdk.ia64 sles10-sp4.x86-64 sles10-sp4.ia64 sle10-sp4-sdk.ppc sled10-sp4.x86-64 sle10-sp4-sdk.s390x sle10-sp4-sdk.x86-64 sled10-sp4.x86 sles10-sp4.s390x sle10-sp4-sdk.x86 sles10-sp4.ppc sles10-sp4.x86 ZYPP Patch Nr: 8311
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T	`postgresql-devel >= 8.1.23-0.11.1` `postgresql-libs >= 8.1.23-0.11.1` `postgresql-libs-32bit >= 8.1.23-0.11.1`	sle10-sp4-sdk.ia64 sles10-sp4.x86-64 sles10-sp4.ia64 sle10-sp4-sdk.ppc sled10-sp4.x86-64 sle10-sp4-sdk.s390x sle10-sp4-sdk.x86-64 sled10-sp4.x86 sles10-sp4.s390x sle10-sp4-sdk.x86 sles10-sp4.ppc sles10-sp4.x86 ZYPP Patch Nr: 8311
SLE SDK 10 SP4 for IBM iSeries and IBM pSeries SLE SDK 10 SP4 for IBM zSeries SLE SDK 10 SP4 for IPF SLE SDK 10 SP4 for X86-64 SLE SDK 10 SP4 for x86	`postgresql >= 8.1.23-0.11.1` `postgresql-contrib >= 8.1.23-0.11.1` `postgresql-devel >= 8.1.23-0.11.1` `postgresql-docs >= 8.1.23-0.11.1` `postgresql-pl >= 8.1.23-0.11.1` `postgresql-server >= 8.1.23-0.11.1`	sle10-sp4-sdk.ia64 sles10-sp4.x86-64 sles10-sp4.ia64 sle10-sp4-sdk.ppc sled10-sp4.x86-64 sle10-sp4-sdk.s390x sle10-sp4-sdk.x86-64 sled10-sp4.x86 sles10-sp4.s390x sle10-sp4-sdk.x86 sles10-sp4.ppc sles10-sp4.x86 ZYPP Patch Nr: 8311
SUSE Linux Enterprise Server 10 SP4 for x86	`postgresql >= 8.1.23-0.11.1` `postgresql-contrib >= 8.1.23-0.11.1` `postgresql-devel >= 8.1.23-0.11.1` `postgresql-docs >= 8.1.23-0.11.1` `postgresql-libs >= 8.1.23-0.11.1` `postgresql-pl >= 8.1.23-0.11.1` `postgresql-server >= 8.1.23-0.11.1`	sle10-sp4-sdk.ia64 sles10-sp4.x86-64 sles10-sp4.ia64 sle10-sp4-sdk.ppc sled10-sp4.x86-64 sle10-sp4-sdk.s390x sle10-sp4-sdk.x86-64 sled10-sp4.x86 sles10-sp4.s390x sle10-sp4-sdk.x86 sles10-sp4.ppc sles10-sp4.x86 ZYPP Patch Nr: 8311
SUSE Linux Enterprise Server 10 SP4 for IPF	`postgresql >= 8.1.23-0.11.1` `postgresql-contrib >= 8.1.23-0.11.1` `postgresql-devel >= 8.1.23-0.11.1` `postgresql-docs >= 8.1.23-0.11.1` `postgresql-libs >= 8.1.23-0.11.1` `postgresql-libs-x86 >= 8.1.23-0.11.1` `postgresql-pl >= 8.1.23-0.11.1` `postgresql-server >= 8.1.23-0.11.1`	sle10-sp4-sdk.ia64 sles10-sp4.x86-64 sles10-sp4.ia64 sle10-sp4-sdk.ppc sled10-sp4.x86-64 sle10-sp4-sdk.s390x sle10-sp4-sdk.x86-64 sled10-sp4.x86 sles10-sp4.s390x sle10-sp4-sdk.x86 sles10-sp4.ppc sles10-sp4.x86 ZYPP Patch Nr: 8311
SUSE Linux Enterprise Server 10 SP4 for IBM POWER	`postgresql >= 8.1.23-0.11.1` `postgresql-contrib >= 8.1.23-0.11.1` `postgresql-devel >= 8.1.23-0.11.1` `postgresql-docs >= 8.1.23-0.11.1` `postgresql-libs >= 8.1.23-0.11.1` `postgresql-libs-64bit >= 8.1.23-0.11.1` `postgresql-pl >= 8.1.23-0.11.1` `postgresql-server >= 8.1.23-0.11.1`	sle10-sp4-sdk.ia64 sles10-sp4.x86-64 sles10-sp4.ia64 sle10-sp4-sdk.ppc sled10-sp4.x86-64 sle10-sp4-sdk.s390x sle10-sp4-sdk.x86-64 sled10-sp4.x86 sles10-sp4.s390x sle10-sp4-sdk.x86 sles10-sp4.ppc sles10-sp4.x86 ZYPP Patch Nr: 8311
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit	`postgresql >= 8.1.23-0.11.1` `postgresql-contrib >= 8.1.23-0.11.1` `postgresql-devel >= 8.1.23-0.11.1` `postgresql-docs >= 8.1.23-0.11.1` `postgresql-libs >= 8.1.23-0.11.1` `postgresql-libs-32bit >= 8.1.23-0.11.1` `postgresql-pl >= 8.1.23-0.11.1` `postgresql-server >= 8.1.23-0.11.1`	sle10-sp4-sdk.ia64 sles10-sp4.x86-64 sles10-sp4.ia64 sle10-sp4-sdk.ppc sled10-sp4.x86-64 sle10-sp4-sdk.s390x sle10-sp4-sdk.x86-64 sled10-sp4.x86 sles10-sp4.s390x sle10-sp4-sdk.x86 sles10-sp4.ppc sles10-sp4.x86 ZYPP Patch Nr: 8311

Products

Products By Category

Collaboration

Endpoint Management

File & Networking Services

Services & Support

Help Yourself

Let Us Help

Download

IT Consulting

Technical Training

Customer Center

Contribute

Partners

Partner With Novell

PartnerNet

Find a Partner

Developers

Communities

About Novell

How to Buy