CVE-2014-0063 — MEDIUM (6.5)

Q: How severe is CVE-2014-0063?

CVE-2014-0063 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2014-0063?

Check the references section above for vendor advisories and patch information. Affected products include: Postgresql Postgresql.

Vulnerability Description

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.

CVSS Score

6.5

MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Postgresql	Postgresql	<= 8.4.19

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2014-0063?

CVE-2014-0063 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a deni...

How severe is CVE-2014-0063?

CVE-2014-0063 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-0063?

Check the references section above for vendor advisories and patch information. Affected products include: Postgresql Postgresql.