CVE-2007-6067

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 8.2.6 PostgreSQL versions prior to 8.1.11 PostgreSQL versions prior to 8.0.15 PostgreSQL versions prior to 7.4.19 TCL versions prior to 8.4.17

Description The issue allows remote authenticated users to cause a denial of service, specifically memory consumption, by providing a crafted complex regular expression with doubly-nested states. This is related to an algorithmic complexity vulnerability in the regular expression parser.

Recommendations For PostgreSQL versions prior to 8.2.6, update to version 8.2.6 or later. For PostgreSQL versions prior to 8.1.11, update to version 8.1.11 or later. For PostgreSQL versions prior to 8.0.15, update to version 8.0.15 or later. For PostgreSQL versions prior to 7.4.19, update to version 7.4.19 or later. For TCL versions prior to 8.4.17, update to version 8.4.17 or later.