Every CVE Search/ Get API key

CVE-2010-4015

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array...

6.5 MediumFix available

CVE-2010-4015 is a medium vulnerability (CVSS 6.5) in Postgresql, published February 2, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.62%, the 91st percentile. Fixed in postgresql-8.3 8.3.14-0lenny1.

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

Exploit likelihood

4.62%Down 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

Record
CVE-2010-4015
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

Record
CVE-2010-4015
Updated
2026-11-02
EUVDEUVD-2010-3991 No score

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

Record
EUVD-2010-3991
Updated
2026-11-03
GitHub AdvisoriesGHSA-pp9j-974q-cm92 No score

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array...

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, and 8.2.x before 8.2.20 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via integers with a large number of digits to unspecified functions.

Record
GHSA-pp9j-974q-cm92
Updated
2026-11-02
OSVBELL-CVE-2010-4015 6.5

CVE-2010-4015 does not affect BellSoft software

Record
BELL-CVE-2010-4015
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql-8.3
Debian:5.0
 before 8.3.14-0lenny1, plus listed versions
8.3.10-0lenny18.3.11-0lenny18.3.12-0lenny18.3.13-0lenny18.3.5-1
Show 17 moreShow less
8.3.5-28.3.6-18.3.6-1~bpo40+18.3.7-0lenny18.3.7-0lenny1~bpo40+18.3.7-18.3.7-28.3.7-38.3.7-48.3.8-0lenny18.3.8-0lenny1~bpo40+18.3.8-0lenny1~bpo40+28.3.8-18.3.8-1+sh48.3.9-0lenny18.3.9-0lenny1~bpo40+18.3.9-1
8.3.14-0lenny1
postgresql-8.4
Debian:6.0
 before 8.4.7-0squeeze2, plus listed versions
8.4.5-0squeeze28.4.5-18.4.5-1~bpo50+18.4.5-28.4.5-2~bpo50+18.4.6-18.4.7-0squeeze1~bpo50+1
8.4.7-0squeeze2
postgresql
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-contrib
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-devel
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-docs
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-jdbc
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-libs
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-pl
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
Show 108 moreShow less
Affected packages
PackageAffectedFixed
postgresql-python
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-server
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-tcl
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-test
Red Hat:enterprise_linux:4::as
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-contrib
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-devel
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-docs
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-jdbc
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-libs
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-pl
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-python
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-server
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-tcl
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-test
Red Hat:enterprise_linux:4::desktop
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-contrib
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-devel
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-docs
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-jdbc
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-libs
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-pl
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-python
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-server
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-tcl
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-test
Red Hat:enterprise_linux:4::es
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-contrib
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-devel
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-docs
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-jdbc
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-libs
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-pl
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-python
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-server
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-tcl
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql-test
Red Hat:enterprise_linux:4::ws
 before 0:7.4.30-1.el4_8.2
0:7.4.30-1.el4_8.2
postgresql
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-contrib
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-devel
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-docs
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-libs
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-pl
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-python
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-server
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-tcl
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql-test
Red Hat:enterprise_linux:5::server
 before 0:8.1.23-1.el5_6.1
0:8.1.23-1.el5_6.1
postgresql
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-contrib
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-devel
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-docs
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-plperl
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-plpython
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-pltcl
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-server
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-test
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-libs
Red Hat:enterprise_linux:6::client
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-contrib
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-devel
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-docs
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-libs
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-plperl
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-plpython
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-pltcl
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-server
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-test
Red Hat:enterprise_linux:6::computenode
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-contrib
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-devel
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-docs
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-libs
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-plperl
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-plpython
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-pltcl
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-server
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-test
Red Hat:enterprise_linux:6::server
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-contrib
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-devel
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-docs
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-libs
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-plperl
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-plpython
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-pltcl
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-server
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql-test
Red Hat:enterprise_linux:6::workstation
 before 0:8.4.7-1.el6_0.1
0:8.4.7-1.el6_0.1
postgresql84
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-contrib
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-devel
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-docs
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-libs
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-plperl
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-plpython
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-pltcl
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-python
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-server
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-tcl
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1
postgresql84-test
Red Hat:enterprise_linux:5::server
 before 0:8.4.7-1.el5_6.1
0:8.4.7-1.el5_6.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 35 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open