NetSight
IP …
medium4.0

CVE-2014-0066

The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check…

Impact

The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.

Affected products

VendorProductAffected versions
PostgresqlPostgresql
through 8.4.19
Versions 8.4.1, 8.4.2, 8.4.3, 8.4.4, 8.4.5

Weakness classification

CWE-20

References