VULNERABILITY INTELLIGENCE
CVE-2014-0066
CVSS score4 MEDIUM
EPSS probability4.68%
CISA KEVNot currently listed
Published2014-03-31
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Description
The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.
Weakness classification
- CWE-20: Improper Input Validation