CVE-2005-0247
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to...
CVE-2005-0247 is a medium vulnerability (CVSS 6.5) in Postgresql, published February 8, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.51%, the 89th percentile. No source names a fixed version.
- Severity
- 6.5 MediumCVSS 2.0, NVD
- Exploit chance
- 3.51%EPSS, 89th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresqlDebian:3.0 From an advisory covering 2 CVEs | before 7.2.1-2woody8, plus listed versions 7.2.1-2woody6 | 7.2.1-2woody8 |
postgresqlRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
Show 87 moreShow less
| Package | Affected | Fixed |
|---|---|---|
postgresql-serverRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresqlRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-contribRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-docsRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-jdbcRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-libsRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-plRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-pythonRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-tclRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
postgresql-testRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs | before 0:7.4.7-2.RHEL4.1 | 0:7.4.7-2.RHEL4.1 |
rh-postgresqlRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresqlRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-contribRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-develRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-docsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-jdbcRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-libsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-plRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-pythonRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-serverRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-tclRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
rh-postgresql-testRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:7.3.9-2 | 0:7.3.9-2 |
What each source reports
NVD Score used
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.
- Record
CVE-2005-0247- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.
- Record
CVE-2005-0247- Updated
- 2026-11-02
EUVDEUVD-2005-0248No score
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.
- Record
EUVD-2005-0248- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggh8-6p3g-2rw7No score
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to...
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.
- Record
GHSA-ggh8-6p3g-2rw7- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
archives.postgresql.org/pgsql-committers/2005-02/msg00049.php
exchange.xforce.ibmcloud.com/vulnerabilities/19377
gentoo.org/security/en/glsa/glsa-200502-19.xml
mandriva.com/security/advisories?name=MDKSA-2005:040
marc.info?l=bugtraq&m=110806034116082&w=2
novell.com/linux/security/advisories/2005_27_postgresql.html
Show 37 moreShow less
redhat.com/support/errata/RHSA-2005-138.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9345
securityfocus.com/bid/12417
debian.org/security/2005/dsa-683
nvd.nist.gov/vuln/detail/CVE-2005-0247
github.com/advisories/GHSA-ggh8-6p3g-2rw7
access.redhat.com/errata/RHSA-2005:138
bugzilla.redhat.com/show_bug.cgi?id=147380
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_138.json
cve.org/CVERecord?id=CVE-2005-0227