VULNERABILITY INTELLIGENCE

CVE-2006-5540

CVSS score4 MEDIUM
EPSS probability2.03%
CISA KEVNot currently listed
Published2006-10-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P

Description

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Primary references