CVE-2006-5541: PostgreSQL

Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days.

backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.

Affected products

• PostgreSQL PostgreSQL: from 7.4, before 7.4.14 (fixed in 7.4.14); from 8.0.0, before 8.0.9 (fixed in 8.0.9); from 8.1.0, before 8.1.5 (fixed in 8.1.5)

Published 2006-10-26. Last modified 2026-06-16.