Upstream information

CVE-2014-0063 at MITRE

Description

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.

SUSE information

CVSS v2 Scores
  National Vulnerability Database
Base Score 6.52
Vector AV:N/AC:L/Au:S/C:P/I:P/A:P
Access Vector Network
Access Complexity Low
Authentication Single
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial

This issue is currently rated as having important severity.

SUSE Bugzilla entries: 864850 [RESOLVED / ], 864856 [RESOLVED / ]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 11 SP3
  • libecpg6 >= 9.1.12-0.3.1
  • libpq5 >= 9.1.12-0.3.1
  • libpq5-32bit >= 9.1.12-0.3.1
  • postgresql91 >= 9.1.12-0.3.1
  • postgresql91-docs >= 9.1.12-0.3.1
Patchnames:
sledsp3-libecpg6
SUSE Linux Enterprise Desktop 12
  • libecpg6 >= 9.3.5-2.3
  • libpq5 >= 9.3.5-2.3
  • libpq5-32bit >= 9.3.5-2.3
  • postgresql93 >= 9.3.5-2.24
Patchnames:
SUSE Linux Enterprise Desktop 12 GA libecpg6
SUSE Linux Enterprise Desktop 12 SP1
  • libecpg6 >= 9.4.5-4.1
  • libpq5 >= 9.4.5-4.1
  • libpq5-32bit >= 9.4.5-4.1
  • postgresql94 >= 9.4.5-4.5
Patchnames:
SUSE Linux Enterprise Desktop 12 SP1 GA libecpg6
SUSE Linux Enterprise Desktop 12 SP2
  • libecpg6 >= 9.4.9-14.1
  • libpq5 >= 9.4.9-14.1
  • libpq5-32bit >= 9.4.9-14.1
  • postgresql94 >= 9.4.9-14.1
Patchnames:
SUSE Linux Enterprise Desktop 12 SP2 GA libecpg6
SUSE Linux Enterprise Server 11 SP3
  • libecpg6 >= 9.1.12-0.3.1
  • libpq5 >= 9.1.12-0.3.1
  • libpq5-32bit >= 9.1.12-0.3.1
  • postgresql91 >= 9.1.12-0.3.1
  • postgresql91-contrib >= 9.1.12-0.3.1
  • postgresql91-docs >= 9.1.12-0.3.1
  • postgresql91-server >= 9.1.12-0.3.1
Patchnames:
slessp3-libecpg6
SUSE Linux Enterprise Server 11 SP4
  • libecpg6 >= 9.4.4-0.6.2
  • libpq5 >= 9.4.4-0.6.2
  • libpq5-32bit >= 9.4.4-0.6.2
  • postgresql94 >= 9.4.4-0.6.2
  • postgresql94-contrib >= 9.4.4-0.6.2
  • postgresql94-docs >= 9.4.4-0.6.2
  • postgresql94-server >= 9.4.4-0.6.2
Patchnames:
SUSE Linux Enterprise Server 11 SP4 GA libecpg6
SUSE Linux Enterprise Server 12
  • libecpg6 >= 9.3.5-2.3
  • libpq5 >= 9.3.5-2.3
  • libpq5-32bit >= 9.3.5-2.3
  • postgresql93 >= 9.3.5-2.24
  • postgresql93-contrib >= 9.3.5-2.24
  • postgresql93-docs >= 9.3.5-2.24
  • postgresql93-server >= 9.3.5-2.24
Patchnames:
SUSE Linux Enterprise Server 12 GA libecpg6
SUSE Linux Enterprise Server 12 SP1
  • libecpg6 >= 9.4.5-4.1
  • libpq5 >= 9.4.5-4.1
  • libpq5-32bit >= 9.4.5-4.1
  • postgresql94 >= 9.4.5-4.5
  • postgresql94-contrib >= 9.4.5-4.5
  • postgresql94-docs >= 9.4.5-4.5
  • postgresql94-server >= 9.4.5-4.5
Patchnames:
SUSE Linux Enterprise Server 12 SP1 GA libecpg6
SUSE Linux Enterprise Server 12 SP2
  • libecpg6 >= 9.4.9-14.1
  • libpq5 >= 9.4.9-14.1
  • libpq5-32bit >= 9.4.9-14.1
  • postgresql94 >= 9.4.9-14.1
  • postgresql94-contrib >= 9.4.9-14.1
  • postgresql94-docs >= 9.4.9-14.1
  • postgresql94-server >= 9.4.9-14.1
Patchnames:
SUSE Linux Enterprise Server 12 SP2 GA libecpg6
SUSE Linux Enterprise Server for Rasperry Pi 12 SP2
  • libecpg6 >= 9.4.9-14.1
  • libpq5 >= 9.4.9-14.1
  • postgresql94 >= 9.4.9-14.1
  • postgresql94-contrib >= 9.4.9-14.1
  • postgresql94-docs >= 9.4.9-14.1
  • postgresql94-server >= 9.4.9-14.1
Patchnames:
SUSE Linux Enterprise Server for Rasperry Pi 12 SP2 GA libecpg6
SUSE Linux Enterprise Server for VMWare 11 SP3
  • libecpg6 >= 9.1.12-0.3.1
  • libpq5 >= 9.1.12-0.3.1
  • libpq5-32bit >= 9.1.12-0.3.1
  • postgresql91 >= 9.1.12-0.3.1
  • postgresql91-contrib >= 9.1.12-0.3.1
  • postgresql91-docs >= 9.1.12-0.3.1
  • postgresql91-server >= 9.1.12-0.3.1
Patchnames:
slessp3-libecpg6
SUSE Linux Enterprise Software Development Kit 11 SP3
  • postgresql91-devel >= 9.1.12-0.3.1
Patchnames:
sdksp3-libecpg6
SUSE Linux Enterprise Software Development Kit 11 SP4
  • postgresql94-devel >= 9.4.4-0.6.2
Patchnames:
SUSE Linux Enterprise Software Development Kit 11 SP4 GA postgresql94-devel
SUSE Linux Enterprise Software Development Kit 12
  • postgresql93-devel >= 9.3.5-2.3
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 GA postgresql93-devel
SUSE Linux Enterprise Software Development Kit 12 SP1
  • postgresql94-devel >= 9.4.5-4.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP1 GA postgresql94-devel
SUSE Linux Enterprise Software Development Kit 12 SP2
  • postgresql94-devel >= 9.4.9-14.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 12 SP2 GA postgresql94-devel
SUSE Linux Enterprise Software Development Kit 11 SP3
  • postgresql91-devel >= 9.1.12-0.3.1
Builds
SAT Patch Nr: 8970
SUSE Linux Enterprise Desktop 11 SP3
  • libecpg6 >= 9.1.12-0.3.1
  • libpq5 >= 9.1.12-0.3.1
  • postgresql91 >= 9.1.12-0.3.1
  • postgresql91-docs >= 9.1.12-0.3.1
Builds
SAT Patch Nr: 8970
SUSE Linux Enterprise Desktop 11 SP3
  • libecpg6 >= 9.1.12-0.3.1
  • libpq5 >= 9.1.12-0.3.1
  • libpq5-32bit >= 9.1.12-0.3.1
  • postgresql91 >= 9.1.12-0.3.1
  • postgresql91-docs >= 9.1.12-0.3.1
Builds
SAT Patch Nr: 8970
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3 for VMware
  • libecpg6 >= 9.1.12-0.3.1
  • libpq5 >= 9.1.12-0.3.1
  • postgresql91 >= 9.1.12-0.3.1
  • postgresql91-contrib >= 9.1.12-0.3.1
  • postgresql91-docs >= 9.1.12-0.3.1
  • postgresql91-server >= 9.1.12-0.3.1
Builds
SAT Patch Nr: 8970
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3 for VMware
  • libecpg6 >= 9.1.12-0.3.1
  • libpq5 >= 9.1.12-0.3.1
  • libpq5-32bit >= 9.1.12-0.3.1
  • postgresql91 >= 9.1.12-0.3.1
  • postgresql91-contrib >= 9.1.12-0.3.1
  • postgresql91-docs >= 9.1.12-0.3.1
  • postgresql91-server >= 9.1.12-0.3.1
Builds
SAT Patch Nr: 8970
openSUSE 12.3
  • libecpg6 >= 9.2.7-1.12.1
  • libecpg6-32bit >= 9.2.7-1.12.1
  • libecpg6-debuginfo >= 9.2.7-1.12.1
  • libecpg6-debuginfo-32bit >= 9.2.7-1.12.1
  • libpq5 >= 9.2.7-1.12.1
  • libpq5-32bit >= 9.2.7-1.12.1
  • libpq5-debuginfo >= 9.2.7-1.12.1
  • libpq5-debuginfo-32bit >= 9.2.7-1.12.1
  • postgresql92 >= 9.2.7-1.12.1
  • postgresql92-contrib >= 9.2.7-1.12.1
  • postgresql92-contrib-debuginfo >= 9.2.7-1.12.1
  • postgresql92-debuginfo >= 9.2.7-1.12.1
  • postgresql92-debugsource >= 9.2.7-1.12.1
  • postgresql92-devel >= 9.2.7-1.12.1
  • postgresql92-devel-debuginfo >= 9.2.7-1.12.1
  • postgresql92-docs >= 9.2.7-1.12.1
  • postgresql92-libs >= 9.2.7-1.12.1
  • postgresql92-libs-debugsource >= 9.2.7-1.12.1
  • postgresql92-plperl >= 9.2.7-1.12.1
  • postgresql92-plperl-debuginfo >= 9.2.7-1.12.1
  • postgresql92-plpython >= 9.2.7-1.12.1
  • postgresql92-plpython-debuginfo >= 9.2.7-1.12.1
  • postgresql92-pltcl >= 9.2.7-1.12.1
  • postgresql92-pltcl-debuginfo >= 9.2.7-1.12.1
  • postgresql92-server >= 9.2.7-1.12.1
  • postgresql92-server-debuginfo >= 9.2.7-1.12.1
Patchnames:
openSUSE-2014-192
openSUSE 13.1
  • libecpg6 >= 9.2.7-4.4.1
  • libecpg6-32bit >= 9.2.7-4.4.1
  • libecpg6-debuginfo >= 9.2.7-4.4.1
  • libecpg6-debuginfo-32bit >= 9.2.7-4.4.1
  • libpq5 >= 9.2.7-4.4.1
  • libpq5-32bit >= 9.2.7-4.4.1
  • libpq5-debuginfo >= 9.2.7-4.4.1
  • libpq5-debuginfo-32bit >= 9.2.7-4.4.1
  • postgresql92 >= 9.2.7-4.4.1
  • postgresql92-contrib >= 9.2.7-4.4.1
  • postgresql92-contrib-debuginfo >= 9.2.7-4.4.1
  • postgresql92-debuginfo >= 9.2.7-4.4.1
  • postgresql92-debugsource >= 9.2.7-4.4.1
  • postgresql92-devel >= 9.2.7-4.4.1
  • postgresql92-devel-debuginfo >= 9.2.7-4.4.1
  • postgresql92-docs >= 9.2.7-4.4.1
  • postgresql92-libs >= 9.2.7-4.4.1
  • postgresql92-libs-debugsource >= 9.2.7-4.4.1
  • postgresql92-plperl >= 9.2.7-4.4.1
  • postgresql92-plperl-debuginfo >= 9.2.7-4.4.1
  • postgresql92-plpython >= 9.2.7-4.4.1
  • postgresql92-plpython-debuginfo >= 9.2.7-4.4.1
  • postgresql92-pltcl >= 9.2.7-4.4.1
  • postgresql92-pltcl-debuginfo >= 9.2.7-4.4.1
  • postgresql92-server >= 9.2.7-4.4.1
  • postgresql92-server-debuginfo >= 9.2.7-4.4.1
Patchnames:
openSUSE-2014-192
openSUSE 13.2
  • libecpg6 >= 9.3.5-2.1.14
  • libpq5 >= 9.3.5-2.1.14
  • libpq5-32bit >= 9.3.5-2.1.14
  • postgresql93 >= 9.3.5-2.1.14
  • postgresql93-contrib >= 9.3.5-2.1.14
  • postgresql93-devel >= 9.3.5-2.1.14
  • postgresql93-docs >= 9.3.5-2.1.14
  • postgresql93-server >= 9.3.5-2.1.14
Patchnames:
openSUSE 13.2 GA libecpg6
openSUSE Evergreen 11.4
  • libecpg6 >= 9.0.16-43.1
  • libecpg6-debuginfo >= 9.0.16-43.1
  • libpq5 >= 9.0.16-43.1
  • libpq5-32bit >= 9.0.16-43.1
  • libpq5-debuginfo >= 9.0.16-43.1
  • libpq5-debuginfo-32bit >= 9.0.16-43.1
  • libpq5-debuginfo-x86 >= 9.0.16-43.1
  • libpq5-x86 >= 9.0.16-43.1
  • postgresql >= 9.0.16-43.1
  • postgresql-contrib >= 9.0.16-43.1
  • postgresql-contrib-debuginfo >= 9.0.16-43.1
  • postgresql-debuginfo >= 9.0.16-43.1
  • postgresql-debugsource >= 9.0.16-43.1
  • postgresql-devel >= 9.0.16-43.1
  • postgresql-devel-debuginfo >= 9.0.16-43.1
  • postgresql-docs >= 9.0.16-43.1
  • postgresql-libs >= 9.0.16-43.1
  • postgresql-libs-debugsource >= 9.0.16-43.1
  • postgresql-plperl >= 9.0.16-43.1
  • postgresql-plperl-debuginfo >= 9.0.16-43.1
  • postgresql-plpython >= 9.0.16-43.1
  • postgresql-plpython-debuginfo >= 9.0.16-43.1
  • postgresql-pltcl >= 9.0.16-43.1
  • postgresql-pltcl-debuginfo >= 9.0.16-43.1
  • postgresql-server >= 9.0.16-43.1
  • postgresql-server-debuginfo >= 9.0.16-43.1
Patchnames:
2014-32
openSUSE Leap 42.1
  • libecpg6 >= 9.4.5-1.1
  • libpq5 >= 9.4.5-1.1
  • libpq5-32bit >= 9.4.5-1.1
  • postgresql94 >= 9.4.5-1.2
  • postgresql94-contrib >= 9.4.5-1.2
  • postgresql94-devel >= 9.4.5-1.1
  • postgresql94-docs >= 9.4.5-1.2
  • postgresql94-server >= 9.4.5-1.2
Patchnames:
openSUSE Leap 42.1 GA libecpg6
openSUSE Leap 42.2
  • libecpg6 >= 9.4.9-8.1
  • libpq5 >= 9.4.9-8.1
  • postgresql93-docs >= 9.3.11-4.1
  • postgresql94 >= 9.4.9-8.1
  • postgresql94-contrib >= 9.4.9-8.1
  • postgresql94-devel >= 9.4.9-8.1
  • postgresql94-docs >= 9.4.9-8.1
  • postgresql94-server >= 9.4.9-8.1
Patchnames:
openSUSE Leap 42.2 GA libecpg6
openSUSE Leap 42.2 GA postgresql93-docs
openSUSE Tumbleweed
  • libecpg6 >= 9.5.4-1.2
  • libecpg6-32bit >= 9.5.4-1.2
  • libpq5 >= 9.5.4-1.2
  • libpq5-32bit >= 9.5.4-1.2
  • postgresql93 >= 9.3.15-1.1
  • postgresql93-contrib >= 9.3.15-1.1
  • postgresql93-devel >= 9.3.15-1.1
  • postgresql93-docs >= 9.3.15-1.1
  • postgresql93-plperl >= 9.3.15-1.1
  • postgresql93-plpython >= 9.3.15-1.1
  • postgresql93-pltcl >= 9.3.15-1.1
  • postgresql93-server >= 9.3.15-1.1
  • postgresql93-test >= 9.3.15-1.1
  • postgresql94 >= 9.4.10-1.1
  • postgresql94-contrib >= 9.4.10-1.1
  • postgresql94-devel >= 9.4.10-1.1
  • postgresql94-docs >= 9.4.10-1.1
  • postgresql94-plperl >= 9.4.10-1.1
  • postgresql94-plpython >= 9.4.10-1.1
  • postgresql94-pltcl >= 9.4.10-1.1
  • postgresql94-server >= 9.4.10-1.1
  • postgresql94-test >= 9.4.10-1.1
  • postgresql95 >= 9.5.4-1.2
  • postgresql95-contrib >= 9.5.4-1.2
  • postgresql95-devel >= 9.5.4-1.2
  • postgresql95-docs >= 9.5.4-1.2
  • postgresql95-plperl >= 9.5.4-1.2
  • postgresql95-plpython >= 9.5.4-1.2
  • postgresql95-pltcl >= 9.5.4-1.2
  • postgresql95-server >= 9.5.4-1.2
  • postgresql95-test >= 9.5.4-1.2
Patchnames:
openSUSE Tumbleweed GA libecpg6-32bit
openSUSE Tumbleweed GA postgresql93
openSUSE Tumbleweed GA postgresql94