CVE-2005-1410
6 documents6 sources
Severity
2.1LOW
EPSS
0.1%
top 68.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 3
Latest updateMay 1
Description
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.
CVSS vector
AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9