CVE-2005-0245
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute...
7.5 HighPublic exploitFix available
CVE-2005-0245 is a high vulnerability (CVSS 7.5) in Postgresql, published February 1, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.5%, the 96th percentile. Fixed in postgresql 7.2.1-2woody8.
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
Exploit likelihood
14.5%Down 9.6 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
- Record
CVE-2005-0245- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
- Record
CVE-2005-0245- Updated
- 2026-11-02
EUVDEUVD-2005-0246 No score
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
- Record
EUVD-2005-0246- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8r34-wff9-3x69 No score
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute...
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
- Record
GHSA-8r34-wff9-3x69- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresqlDebian:3.0 |
before 7.2.1-2woody8, plus listed versions 7.2.1-2woody6 |
7.2.1-2woody8 |
postgresqlRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
Show 87 moreShow less
| Package | Affected | Fixed |
|---|---|---|
postgresql-serverRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::as |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::es |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::ws |
before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
rh-postgresqlRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::as |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::es |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws |
before 0:7.3.9-2 | 0:7.3.9-2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PostgreSQL 7.x - Multiple Vulnerabilities | 2005-02-01 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
exchange.xforce.ibmcloud.com/vulnerabilities/19188
archives.postgresql.org/pgsql-committers/2005-02/msg00049.php
mandriva.com/security/advisories?name=MDKSA-2005:040
marc.info?l=bugtraq&m=110806034116082&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10175
Show 35 moreShow less
redhat.com/support/errata/RHSA-2005-138.html
secunia.com/advisories/12948
securityfocus.com/bid/12417
debian.org/security/2005/dsa-683
novell.com/linux/security/advisories/2005_36_sudo.html
nvd.nist.gov/vuln/detail/CVE-2005-0245
github.com/advisories/GHSA-8r34-wff9-3x69
access.redhat.com/errata/RHSA-2005:138
bugzilla.redhat.com/show_bug.cgi?id=147380
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_138.json
cve.org/CVERecord?id=CVE-2005-0227