CVE-2006-5540

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-26 · updated 2026-06-16

Description

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Affected products

PostgreSQL: 6.3.2, 6.5.3, 7.0.2, 7.0.3, 7.1, 7.1.1 (+50)

References

http://projects.commandprompt.com/public/pgsql/changeset/25504
http://secunia.com/advisories/22562
http://secunia.com/advisories/22584
http://secunia.com/advisories/22606
http://secunia.com/advisories/22636
http://secunia.com/advisories/23048
http://secunia.com/advisories/23132
http://secunia.com/advisories/24094
http://secunia.com/advisories/24284
http://secunia.com/advisories/24577
http://securitytracker.com/id?1017115

Get alerted when CVE-2006-5540 or the next vulnerability affects your stack