CVE-2006-5540: PostgreSQL

Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days.

backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."

Affected products

• PostgreSQL PostgreSQL: version 6.3.2 only; version 6.5.3 only; version 7.0.2 only; version 7.0.3 only; version 7.1 only; version 7.1.1 only; …

Published 2006-10-26. Last modified 2026-06-16.