CVE-2007-6067 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2007-6067 Interim 1 13 2024-07-27T01:52:03Z current 2021-05-30T12:40:50Z 2024-07-27T01:52:03Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2007-6067 Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AS6Y54VTPKZVGLHSNRGEH2ISET6MSEG7/#AS6Y54VTPKZVGLHSNRGEH2ISET6MSEG7 E-Mail link for SUSE-SA:2008:005 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 libecpg6-9.1.9-0.3.1 libecpg6-9.4.4-0.6.2 libpq5-32bit-9.1.9-0.3.1 libpq5-32bit-9.4.4-0.6.2 libpq5-9.1.9-0.3.1 libpq5-9.4.4-0.6.2 postgresql-8.3.14-0.2.1 postgresql-8.3.23-0.4.1 postgresql-8.3.9-0.1.1 postgresql-contrib-8.3.14-0.2.1 postgresql-contrib-8.3.23-0.4.1 postgresql-contrib-8.3.9-0.1.1 postgresql-devel-8.3.23-0.4.1 postgresql-docs-8.3.14-0.2.1 postgresql-docs-8.3.23-0.4.1 postgresql-docs-8.3.9-0.1.1 postgresql-libs-32bit-8.3.14-0.2.1 postgresql-libs-32bit-8.3.9-0.1.1 postgresql-libs-8.3.14-0.2.1 postgresql-libs-8.3.9-0.1.1 postgresql-libs-x86-8.3.14-0.2.1 postgresql-libs-x86-8.3.9-0.1.1 postgresql-server-8.3.14-0.2.1 postgresql-server-8.3.23-0.4.1 postgresql-server-8.3.9-0.1.1 postgresql10 postgresql91-9.1.9-0.3.1 postgresql91-contrib-9.1.9-0.3.1 postgresql91-docs-9.1.9-0.3.1 postgresql91-server-9.1.9-0.3.1 postgresql94 postgresql94-9.4.4-0.6.2 postgresql94-contrib-9.4.4-0.6.2 postgresql94-devel-9.4.4-0.6.2 postgresql94-docs-9.4.4-0.6.2 postgresql94-server-9.4.4-0.6.2 postgresql-8.3.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 postgresql-contrib-8.3.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 postgresql-docs-8.3.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 postgresql-libs-8.3.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 postgresql-libs-32bit-8.3.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 postgresql-libs-x86-8.3.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 postgresql-server-8.3.9-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 postgresql-8.3.14-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP2 postgresql-contrib-8.3.14-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP2 postgresql-docs-8.3.14-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP2 postgresql-libs-8.3.14-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP2 postgresql-libs-32bit-8.3.14-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP2 postgresql-libs-x86-8.3.14-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP2 postgresql-server-8.3.14-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP2 libecpg6-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libpq5-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libpq5-32bit-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql-contrib-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql-docs-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql-server-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-contrib-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-docs-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-server-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libecpg6-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 libpq5-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 libpq5-32bit-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-contrib-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-docs-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-server-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-contrib-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-docs-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-server-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-devel-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 postgresql94-devel-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 postgresql10 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata postgresql94 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata postgresql10 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata postgresql94 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata postgresql94 as a component of SUSE Linux Enterprise Server 11 SP4 LTSS Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states. CVE-2007-6067 SUSE Linux Enterprise Server 11 SP1:postgresql-8.3.9-0.1.1 SUSE Linux Enterprise Server 11 SP1:postgresql-contrib-8.3.9-0.1.1 SUSE Linux Enterprise Server 11 SP1:postgresql-docs-8.3.9-0.1.1 SUSE Linux Enterprise Server 11 SP1:postgresql-libs-8.3.9-0.1.1 SUSE Linux Enterprise Server 11 SP1:postgresql-libs-32bit-8.3.9-0.1.1 SUSE Linux Enterprise Server 11 SP1:postgresql-libs-x86-8.3.9-0.1.1 SUSE Linux Enterprise Server 11 SP1:postgresql-server-8.3.9-0.1.1 SUSE Linux Enterprise Server 11 SP2:postgresql-8.3.14-0.2.1 SUSE Linux Enterprise Server 11 SP2:postgresql-contrib-8.3.14-0.2.1 SUSE Linux Enterprise Server 11 SP2:postgresql-docs-8.3.14-0.2.1 SUSE Linux Enterprise Server 11 SP2:postgresql-libs-8.3.14-0.2.1 SUSE Linux Enterprise Server 11 SP2:postgresql-libs-32bit-8.3.14-0.2.1 SUSE Linux Enterprise Server 11 SP2:postgresql-libs-x86-8.3.14-0.2.1 SUSE Linux Enterprise Server 11 SP2:postgresql-server-8.3.14-0.2.1 SUSE Linux Enterprise Server 11 SP3:libecpg6-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:libpq5-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:libpq5-32bit-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP3:postgresql-contrib-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP3:postgresql-docs-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP3:postgresql-server-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-contrib-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-docs-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-server-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP4:libecpg6-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:libpq5-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:libpq5-32bit-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:postgresql-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP4:postgresql-contrib-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP4:postgresql-docs-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP4:postgresql-server-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP4:postgresql94-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:postgresql94-contrib-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:postgresql94-docs-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:postgresql94-server-9.4.4-0.6.2 SUSE Linux Enterprise Software Development Kit 11 SP4:postgresql-devel-8.3.23-0.4.1 SUSE Linux Enterprise Software Development Kit 11 SP4:postgresql94-devel-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP3 for Teradata:postgresql10 SUSE Linux Enterprise Server 11 SP3 for Teradata:postgresql94 important 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C