Description
The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-4730 Vulnerability (CVE-2015-4730)
MySQL Other Vulnerability (CVE-2005-1636)
Nginx Improper Input Validation Vulnerability (CVE-2011-4968)
WordPress Plugin SrbTransLatin Multiple Vulnerabilities (1.46)
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2010-1433)