CVE-2005-0245: PostgreSQL

High severity, CVSS 7.5. EPSS: 14.5% chance of exploitation in the next 30 days.

Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.

Affected products

• PostgreSQL PostgreSQL: from 7.3, before 7.3.10 (fixed in 7.3.10); from 7.4, before 7.4.7 (fixed in 7.4.7); version 8.0 only

Published 2005-02-01. Last modified 2026-06-16.