Strix
26.1K

CVE-2014-0063

UnknownEPSS 6.67%

Last modified

CVE-2014-0063 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.. EPSS estimates a 6.67% chance of exploitation in the next 30 days.

Description

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.

Metrics

EPSS Probability
6.67%

93.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
PostgresqlPostgresql<= 8.4.19
PostgresqlPostgresql8.4.1
PostgresqlPostgresql8.4.2
PostgresqlPostgresql8.4.3
PostgresqlPostgresql8.4.4
PostgresqlPostgresql8.4.5
PostgresqlPostgresql8.4.6
PostgresqlPostgresql8.4.7
PostgresqlPostgresql8.4.8
PostgresqlPostgresql8.4.9
PostgresqlPostgresql8.4.10
PostgresqlPostgresql8.4.11
PostgresqlPostgresql8.4.12
PostgresqlPostgresql8.4.13
PostgresqlPostgresql8.4.14
PostgresqlPostgresql8.4.15
PostgresqlPostgresql8.4.16
PostgresqlPostgresql8.4.17
PostgresqlPostgresql8.4.18
PostgresqlPostgresql9.0
PostgresqlPostgresql9.0.1
PostgresqlPostgresql9.0.2
PostgresqlPostgresql9.0.3
PostgresqlPostgresql9.0.4
PostgresqlPostgresql9.0.5
PostgresqlPostgresql9.0.6
PostgresqlPostgresql9.0.7
PostgresqlPostgresql9.0.8
PostgresqlPostgresql9.0.9
PostgresqlPostgresql9.0.10
PostgresqlPostgresql9.0.11
PostgresqlPostgresql9.0.12
PostgresqlPostgresql9.0.13
PostgresqlPostgresql9.0.14
PostgresqlPostgresql9.0.15
PostgresqlPostgresql9.1
PostgresqlPostgresql9.1.1
PostgresqlPostgresql9.1.2
PostgresqlPostgresql9.1.3
PostgresqlPostgresql9.1.4
PostgresqlPostgresql9.1.5
PostgresqlPostgresql9.1.6
PostgresqlPostgresql9.1.7
PostgresqlPostgresql9.1.8
PostgresqlPostgresql9.1.9
PostgresqlPostgresql9.1.10
PostgresqlPostgresql9.1.11
PostgresqlPostgresql9.2
PostgresqlPostgresql9.2.1
PostgresqlPostgresql9.2.2

Showing 50 of 57 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2014-0063?
Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.
How severe is CVE-2014-0063?
Severity scoring for CVE-2014-0063 is pending analysis. The EPSS model estimates a 6.67% probability of exploitation in the next 30 days.
How do I fix CVE-2014-0063?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-0063?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST