CVE-2015-0242

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1, when running on a Windows system, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a floating point number with a large precision, as demonstrated by using the to_char function.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
PostgreSQL Global Development Group	PostgreSQL	before 9.0.19; 9.1.x before 9.1.15; 9.2.x before 9.2.10; 9.3.x before 9.3.6; 9.4.x before 9.4.1

References

http://www.debian.org/security/2015/dsa-3155Third Party Advisory
http://www.postgresql.org/about/news/1569/Vendor Advisory
http://www.postgresql.org/docs/9.4/static/release-9-4-1.htmlRelease Notes, Vendor Advisory
http://www.postgresql.org/docs/current/static/release-9-0-19.htmlRelease Notes, Vendor Advisory
http://www.postgresql.org/docs/current/static/release-9-1-15.htmlRelease Notes, Vendor Advisory
http://www.postgresql.org/docs/current/static/release-9-2-10.htmlRelease Notes, Vendor Advisory
http://www.postgresql.org/docs/current/static/release-9-3-6.htmlRelease Notes, Vendor Advisory
http://www.debian.org/security/2015/dsa-3155Third Party Advisory
http://www.postgresql.org/about/news/1569/Vendor Advisory
http://www.postgresql.org/docs/9.4/static/release-9-4-1.htmlRelease Notes, Vendor Advisory
http://www.postgresql.org/docs/current/static/release-9-0-19.htmlRelease Notes, Vendor Advisory
http://www.postgresql.org/docs/current/static/release-9-1-15.htmlRelease Notes, Vendor Advisory
http://www.postgresql.org/docs/current/static/release-9-2-10.htmlRelease Notes, Vendor Advisory
http://www.postgresql.org/docs/current/static/release-9-3-6.htmlRelease Notes, Vendor Advisory

Timeline

Published: Jan 27, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-02438.8Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and CVE-2015-02449.8PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle erro CVE-2015-02451.9D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure sign CVE-2015-02474.6Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via CVE-2015-02485.0The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a d CVE-2015-02497.2The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute CVE-2015-02506.4XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote at CVE-2015-02514.0The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author CVE-2015-02525.0internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) v CVE-2015-02535.0The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, whic CVE-2015-02547.5Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a cr CVE-2015-02556.4X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information fr