CVE-2010-0733
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5...
3.5 LowPublic exploitFix available
CVE-2010-0733 is a low vulnerability (CVSS 3.5) in Postgresql, published March 19, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.85%, the 94th percentile. Fixed in rh-postgresql 0:7.3.21-3.
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.
Exploit likelihood
6.85%Down 4.2 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.
- Record
CVE-2010-0733- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.
- Record
CVE-2010-0733- Updated
- 2026-11-02
EUVDEUVD-2010-0759 No score
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.
- Record
EUVD-2010-0759- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qxf5-r3fp-g7w9 No score
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5...
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.
- Record
GHSA-qxf5-r3fp-g7w9- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rh-postgresqlRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
Show 114 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-postgresql-tclRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::as |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::es |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresqlRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws |
before 0:7.3.21-3 | 0:7.3.21-3 |
postgresqlRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::as |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::es |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-develRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-plRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresql-testRed Hat:enterprise_linux:4::ws |
before 0:7.4.29-1.el4_8.1 | 0:7.4.29-1.el4_8.1 |
postgresqlRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::client_workstation |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresqlRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-contribRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-docsRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-libsRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-pythonRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-tclRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::client |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresqlRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-contribRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-debuginfoRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-develRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-docsRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-libsRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-plRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-pythonRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-serverRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-tclRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
postgresql-testRed Hat:enterprise_linux:5::server |
before 0:8.1.21-1.el5_5.1 | 0:8.1.21-1.el5_5.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PostgreSQL 8.4.1 - JOIN Hashtable Size Integer Overflow Denial of Service | 2014-06-13 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
archives.postgresql.org/pgsql-bugs/2009-10/msg00277.php
redhat.com/support/errata/RHSA-2010-0427.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10691
git.postgresql.org/gitweb?p=postgresql.git%3Ba=commit%3Bh=64b057e6823655fb6c5d1f24a28f236b94dd6c54
secunia.com/advisories/39820
Show 38 moreShow less
securityfocus.com/bid/38619
openwall.com/lists/oss-security/2010/03/16/10
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
bugzilla.redhat.com/show_bug.cgi?id=546621
vupen.com/english/advisories/2010/1197
nvd.nist.gov/vuln/detail/CVE-2010-0733
access.redhat.com/errata/RHSA-2010:0427
github.com/advisories/GHSA-qxf5-r3fp-g7w9
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0427.json
cve.org/CVERecord?id=CVE-2009-4136