CVE-2014-0066

Priority
Description
The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16,
9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not
properly check the return value of the crypt library function, which allows
remote authenticated users to cause a denial of service (NULL pointer
dereference and crash) via unspecified vectors.
Notes
Package
Upstream:released (8.4.20)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Package
Upstream:released (9.1.12)
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was released [9.1.12-1])
Package
Upstream:released (9.3.3)
Ubuntu 14.04 ESM (Trusty Tahr):released (9.3.3-1)
More Information

Updated: 2020-09-10 02:53:41 UTC (commit 81a23a978c4436cd99e1d040e9e73e9146876281)