CVE-2007-4772
MEDIUM severity · CVSS 4 · CWE-399
4CVSS MEDIUM
Summary
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impactNone
Availability impact—
Exploit probability (EPSS)4%
AV:N/AC:L/Au:S/C:N/I:N/A:P
Affected products we track (2)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.htmlAdvisory