Servers and applications
CVE-2007-0555
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.
- Severity
- High 8.5
- Published
- 6 Feb 2007
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 16 Oct 2026
- Fixed in
- 7.3.18, 7.4.16, 8.0.11, 8.1.7, 8.2.2
- Exploit chance
- 5% in the next 30 daysHigher than 92% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Over the network · Needs a login
- Attacker can
- Read data · Take it down
- CVSS vector
AV:N/AC:L/Au:S/C:C/I:N/A:C- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
PostgreSQLServers and applications · cpe:a:postgresql:postgresql |
|