CVE-2005-0245
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute...
7.5 HighPublic exploit
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
Exploit likelihood
14.5%Down 9.6 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
- Record
CVE-2005-0245- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
- Record
CVE-2005-0245- Updated
- 2026-11-02
EUVDEUVD-2005-0246No score
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
- Record
EUVD-2005-0246- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8r34-wff9-3x69No score
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute...
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
- Record
GHSA-8r34-wff9-3x69- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresqlDebian:3.0 From an advisory covering 2 CVEs | before 7.2.1-2woody8, plus listed versions 7.2.1-2woody6 | 7.2.1-2woody8 |
postgresqlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
Show 87 moreShow less
| Package | Affected | Fixed |
|---|---|---|
postgresql-serverRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
rh-postgresqlRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PostgreSQL 7.x - Multiple Vulnerabilities | 2005-02-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0245 is a high vulnerability (CVSS 7.5) in Postgresql, published February 1, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.5%, the 96th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/19188
archives.postgresql.org/pgsql-committers/2005-02/msg00049.php
mandriva.com/security/advisories?name=MDKSA-2005:040
marc.info?l=bugtraq&m=110806034116082&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10175
Show 35 moreShow less
redhat.com/support/errata/RHSA-2005-138.html
secunia.com/advisories/12948
securityfocus.com/bid/12417
debian.org/security/2005/dsa-683
novell.com/linux/security/advisories/2005_36_sudo.html
nvd.nist.gov/vuln/detail/CVE-2005-0245
github.com/advisories/GHSA-8r34-wff9-3x69
access.redhat.com/errata/RHSA-2005:138
bugzilla.redhat.com/show_bug.cgi?id=147380
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_138.json
cve.org/CVERecord?id=CVE-2005-0227