CVE-2007-4769 in PostgreSQL

Summary

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 09/10/2007
• Disclosure: 01/09/2008
• Moderation: VulDB entry created
• Entries: VDB-40434 (1)
• CPE: ready
• CWE: CWE-189 (Confirmed)
• CVSS: 6.5
• EPSS: 0.01194
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4769
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4769
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4769/