CVE-2006-5540
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to...
4.0 MediumFix available
CVE-2006-5540 is a medium vulnerability (CVSS 4.0) in Postgresql, published October 26, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.03%, the 81st percentile. Fixed in rh-postgresql 0:7.3.18-1.
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
Exploit likelihood
2.03%Down 0.5 points since Feb 4, 2022
What each source reports
NVD Score used
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
- Record
CVE-2006-5540- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
- Record
CVE-2006-5540- Updated
- 2026-11-02
EUVDEUVD-2006-5525 No score
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
- Record
EUVD-2006-5525- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5wmv-4mw3-5frc No score
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to...
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
- Record
GHSA-5wmv-4mw3-5frc- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rh-postgresqlRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
Show 121 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-postgresql-tclRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::as |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresqlRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::es |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresqlRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws |
before 0:7.3.18-1 | 0:7.3.18-1 |
postgresqlRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::as |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::es |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::ws |
before 0:7.4.16-1.RHEL4.1 | 0:7.4.16-1.RHEL4.1 |
postgresqlRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-contribRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-debuginfoRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-develRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-docsRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-libsRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-plRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-pythonRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-serverRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-tclRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresql-testRed Hat:rhel_application_stack:1 |
before 0:8.1.7-3.el4s1.1 | 0:8.1.7-3.el4s1.1 |
postgresqlRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-develRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-plRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-serverRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-testRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresqlRed Hat:enterprise_linux:5::client |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-contribRed Hat:enterprise_linux:5::client |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-docsRed Hat:enterprise_linux:5::client |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-libsRed Hat:enterprise_linux:5::client |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-pythonRed Hat:enterprise_linux:5::client |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-tclRed Hat:enterprise_linux:5::client |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresqlRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-contribRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-debuginfoRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-develRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-docsRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-libsRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-plRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-pythonRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-serverRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-tclRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
postgresql-testRed Hat:enterprise_linux:5::server |
before 0:8.1.8-1.el5 | 0:8.1.8-1.el5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
mandriva.com/security/advisories?name=MDKSA-2006:194
ubuntu.com/usn/usn-369-2
securitytracker.com/id?1017115
projects.commandprompt.com/public/pgsql/changeset/25504
redhat.com/support/errata/RHSA-2007-0068.html
vupen.com/english/advisories/2006/4182
Show 56 moreShow less
secunia.com/advisories/22606
support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html
postgresql.org/about/news.664
novell.com/linux/security/advisories/2006_27_sr.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425
support.avaya.com/elmodocs2/security/ASA-2007-117.htm
trustix.org/errata/2006/0059
securityfocus.com/bid/20717
nvd.nist.gov/vuln/detail/CVE-2006-5540
github.com/advisories/GHSA-5wmv-4mw3-5frc
access.redhat.com/errata/RHSA-2007:0064
bugzilla.redhat.com/show_bug.cgi?id=212358
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0064.json
cve.org/CVERecord?id=CVE-2006-5540