• ► Home
  • Encyclopedia
  • Endpoint Vulnerability
  • PostgreSQL: Certain nested CASE/WHEN expressions can crash server

At a glance:

ID 31611
Created Sep 16, 2016
Description Updated Apr 28, 2020
Severity
Coverage FortiClient

Endpoint Vulnerability

PostgreSQL: Certain nested CASE/WHEN expressions can crash server

Description

A flaw was found in the way PostgreSQL server handled certain SQL statements containing CASE/WHEN commands. A remote, authenticated attacker could use a specially crafted SQL statement to cause PostgreSQL to crash or disclose a few bytes of server memory or possibly execute arbitrary code.

Affected Products

PostgreSQL

Vendor

https://access.redhat.com/security/cve/CVE-2016-5423,

References

CVE-2016-5423,