CVE-2005-0245

Description

Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

23.114

Associated Vulnerability

Vulnerability	OS Platform
Vulnerability CVE-2005-0245 are affected in Postgresql 8.0	Windows
Vulnerabilities CVE-2005-1409,CVE-2005-0245 are fixed in PostgreSQL 7.3.10	Windows
Vulnerabilities CVE-2005-0246,CVE-2005-0245,CVE-2005-0244,CVE-2005-0227 are fixed in PostgreSQL 8.0.1	Windows
Vulnerabilities CVE-2005-0246,CVE-2005-0245,CVE-2005-0244,CVE-2005-0227 are fixed in PostgreSQL 7.4.7	Windows
Vulnerability CVE-2005-0245 are affected in Postgresql 8.0 (For Linux)	Linux
Vulnerabilities CVE-2005-1409,CVE-2005-0245 are fixed in PostgreSQL 7.3.10 (For Linux)	Linux
Vulnerabilities CVE-2005-0246,CVE-2005-0245,CVE-2005-0244,CVE-2005-0227 are fixed in PostgreSQL 8.0.1 (For Linux)	Linux
Vulnerabilities CVE-2005-0246,CVE-2005-0245,CVE-2005-0244,CVE-2005-0227 are fixed in PostgreSQL 7.4.7 (For Linux)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234