CVE-2009-0922

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

• CWE-399

• http://archives.postgresql.org//pgsql-bugs/2009-02/msg00176.phpExploit
• http://archives.postgresql.org/pgsql-bugs/2009-02/msg00172.phpExploit
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517405
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
• http://marc.info/?l=bugtraq&m=134124585221119&w=2
• http://secunia.com/advisories/34453Vendor Advisory
• http://secunia.com/advisories/35100Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-258808-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020455.1-1
• http://wiki.rpath.com/Advisories:rPSA-2009-0086
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:079
• http://www.openwall.com/lists/oss-security/2009/03/11/4
• http://www.postgresql.org/about/news.1065Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2009-1067.html
• http://www.securityfocus.com/archive/1/503598/100/0/threaded
• http://www.securityfocus.com/bid/34090Exploit, Patch
• http://www.securitytracker.com/id?1021860
• http://www.vupen.com/english/advisories/2009/0767Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2009/1316Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=488156
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10874
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6252
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00810.html
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00843.html
• http://archives.postgresql.org//pgsql-bugs/2009-02/msg00176.phpExploit
• http://archives.postgresql.org/pgsql-bugs/2009-02/msg00172.phpExploit
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517405
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
• http://marc.info/?l=bugtraq&m=134124585221119&w=2
• http://secunia.com/advisories/34453Vendor Advisory
• http://secunia.com/advisories/35100Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-258808-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020455.1-1
• http://wiki.rpath.com/Advisories:rPSA-2009-0086
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:079
• http://www.openwall.com/lists/oss-security/2009/03/11/4
• http://www.postgresql.org/about/news.1065Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2009-1067.html
• http://www.securityfocus.com/archive/1/503598/100/0/threaded
• http://www.securityfocus.com/bid/34090Exploit, Patch
• http://www.securitytracker.com/id?1021860
• http://www.vupen.com/english/advisories/2009/0767Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2009/1316Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=488156
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10874
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6252
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00810.html
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00843.html

Published

Mar 17, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0916Unspecified vulnerability in Opera before 9.64 has unknown i…
• CVE-2009-0917Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0…
• CVE-2009-0918Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 thr…
• CVE-2009-0919XAMPP installs multiple packages with insecure default passw…
• CVE-2009-0920Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenV…
• CVE-2009-0921Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in…
• CVE-2009-0923Unspecified vulnerability in Kerberos Incremental Propagatio…
• CVE-2009-0924Unspecified vulnerability in Sun OpenSolaris snv_39 through …
• CVE-2009-0925Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v s…
• CVE-2009-0926Unspecified vulnerability in the UFS filesystem functionalit…
• CVE-2009-0927Stack-based buffer overflow in Adobe Reader and Adobe Acroba…8.8
• CVE-2009-0928Heap-based buffer overflow in Adobe Acrobat Reader and Acrob…