CVE-2010-0733
N/A
Published: March 19, 2010 at 07:00 PM UTC
Updated: June 16, 2026 at 11:16 PM UTC
1 product affected across 1 vendorPostgreSQL
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 7%
Description
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 8.4.18.08.0.08.0.18.0.108.0.118.0.128.0.138.0.148.0.158.0.168.0.178.0.188.0.198.0.28.0.208.0.218.0.228.0.238.0.38.0.3178.0.48.0.58.0.68.0.78.0.88.0.98.18.1.08.1.18.1.108.1.118.1.128.1.138.1.148.1.158.1.168.1.178.1.188.1.198.1.28.1.208.1.38.1.48.1.58.1.68.1.78.1.88.1.98.28.2.18.2.108.2.118.2.128.2.138.2.148.2.158.2.168.2.28.2.38.2.48.2.58.2.68.2.78.2.88.2.98.38.3.18.3.108.3.28.3.38.3.48.3.58.3.68.3.78.3.88.3.98.48.58.5 alpha18.5 alpha2
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (16)
Mailing Listx_refsource_MLIST
Source: [email protected]
http://archives.postgresql.org/pgsql-bugs/2009-10/msg00277.phpMailing Listx_refsource_MLIST
Source: [email protected]
http://archives.postgresql.org/pgsql-bugs/2009-10/msg00287.phpMailing Listx_refsource_MLIST
Source: [email protected]
http://archives.postgresql.org/pgsql-bugs/2009-10/msg00289.phpMailing Listx_refsource_MLIST
Source: [email protected]
http://archives.postgresql.org/pgsql-bugs/2009-10/msg00310.phpVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlMailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2010/03/09/2Quick Info
StatusMODIFIED
CWE
CWE-189
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card