CVE-2006-5541 Denial of service in n/a

What is CVE-2006-5541?

CVE-2006-5541 is a medium-severity denial of service vulnerability in Postgresql Postgresql, published on 26 Oct 2006. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.

Which versions are affected by CVE-2006-5541?

It affects 1 product.

Products include Postgresql Postgresql.

How do I fix CVE-2006-5541?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2006-5541 being exploited?

There is no known exploitation of CVE-2006-5541 in the wild and no public exploit code.

Other vulnerabilities in Postgresql Postgresql

• CVE-2013-1902 Information disclosure in n/a Critical 10.0
• CVE-2013-1903 Information disclosure in n/a Critical 10.0
• CVE-2007-3279 Privilege escalation in n/a Critical 10.0
• CVE-2002-1399 Integer overflow in n/a Critical 10.0
• CVE-2016-3065 Information disclosure in n/a Critical 9.1

All Postgresql Postgresql vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wrg4-46g4-crg5.