Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PostgreSQL bitsubstr函数远程溢出漏洞
Vulnerability Description
PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL的backend/utils/adt/varbit.c文件的bitsubstr函数存在远程溢出漏洞。远程攻击者可以利用PostgreSQL的backend/utils/adt/varbit.c中bitsubstr函数处理超长字符串，触发缓冲区溢出，导致拒绝服务或执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A