CVE-2007-6067

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0…

published January 9, 2008

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03855 · 90.1th percentile
Published
2008-01-09T21:00Z
EPSS history
Timeline
  • 09 JAN 21:00Z
    Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0…
    cvelistv5