CVE-2010-0442
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8...
6.5 MediumPublic exploitFix available
CVE-2010-0442 is a medium vulnerability (CVSS 6.5) in Postgresql, published February 2, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.3%, the 96th percentile. Fixed in postgresql-8.3 8.3.11-0lenny1.
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
Exploit likelihood
13.3%Up 2.2 points since Feb 4, 2022
What each source reports
NVD Score used
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
- Record
CVE-2010-0442- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
- Record
CVE-2010-0442- Updated
- 2026-11-02
EUVDEUVD-2010-0473 No score
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
- Record
EUVD-2010-0473- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gv9m-x3m7-x4g8 No score
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8...
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
- Record
GHSA-gv9m-x3m7-x4g8- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-8.3Debian:5.0 |
before 8.3.11-0lenny1, plus listed versions 8.3.10-0lenny18.3.5-18.3.5-28.3.6-18.3.6-1~bpo40+1 Show 14 moreShow less8.3.7-0lenny18.3.7-0lenny1~bpo40+18.3.7-18.3.7-28.3.7-38.3.7-48.3.8-0lenny18.3.8-0lenny1~bpo40+18.3.8-0lenny1~bpo40+28.3.8-18.3.8-1+sh48.3.9-0lenny18.3.9-0lenny1~bpo40+18.3.9-1 |
8.3.11-0lenny1 |
rh-postgresqlRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
Show 115 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-postgresql-serverRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
postgresqlRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresqlRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-contribRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-docsRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-libsRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-pythonRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-tclRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresqlRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-contribRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-docsRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-libsRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-pythonRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-tclRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PostgreSQL - 'bitsubstr' Buffer Overflow | 2010-01-27 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
redhat.com/support/errata/RHSA-2010-0427.html
securitytracker.com/id?1023510
debian.org/security/2010/dsa-2051
ubuntu.com/usn/usn-933-1
secunia.com/advisories/39820
Show 49 moreShow less
openwall.com/lists/oss-security/2010/01/27/5
vupen.com/english/advisories/2010/1221
securityfocus.com/bid/37973
git.postgresql.org/gitweb?p=postgresql.git%3Ba=commit%3Bh=75dea10196c31d98d98c0bafeeb576ae99c09b12
intevydis.blogspot.com/2010/01/postgresql-8023-bitsubstr-overflow.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=567058
archives.postgresql.org/pgsql-hackers/2010-01/msg00634.php
bugzilla.redhat.com/show_bug.cgi?id=559259
exchange.xforce.ibmcloud.com/vulnerabilities/55902
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9720
mandriva.com/security/advisories?name=MDVSA-2010:103
nvd.nist.gov/vuln/detail/CVE-2010-0442
github.com/advisories/GHSA-gv9m-x3m7-x4g8
access.redhat.com/errata/RHSA-2010:0427
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0427.json
cve.org/CVERecord?id=CVE-2009-4136