Oval Definition:	oval:org.mitre.oval:def:23699
Revision Date: 2014-07-21 Version: 19 Title: ELSA-2014:0249: postgresql security update (Important) Description: The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2014-0060 CVE-2014-0061 CVE-2014-0062 CVE-2014-0063 CVE-2014-0064 CVE-2014-0065 CVE-2014-0066 ELSA-2014:0249-00 Platform(s): Oracle Linux 5 Product(s): postgresql Definition Synopsis Oracle Linux 5.x AND rpm test postgresql-contrib is earlier than 0:8.1.23-10.el5_10 OR postgresql-docs is earlier than 0:8.1.23-10.el5_10 OR postgresql-devel is earlier than 0:8.1.23-10.el5_10 OR postgresql is earlier than 0:8.1.23-10.el5_10 OR postgresql-test is earlier than 0:8.1.23-10.el5_10 OR postgresql-pl is earlier than 0:8.1.23-10.el5_10 OR postgresql-python is earlier than 0:8.1.23-10.el5_10 OR postgresql-tcl is earlier than 0:8.1.23-10.el5_10 OR postgresql-server is earlier than 0:8.1.23-10.el5_10 OR postgresql-libs is earlier than 0:8.1.23-10.el5_10
BACK