CVE-2007-4769: PostgreSQL

Medium severity, CVSS 6.8. EPSS: 3.6% chance of exploitation in the next 30 days.

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.

Affected products

• PostgreSQL PostgreSQL: version 7.3 only; version 7.3.1 only; version 7.3.2 only; version 7.3.3 only; version 7.3.4 only; version 7.3.6 only; …
• Tcl Tk Tcl Tk: up to and including 8.4.16

Published 2008-01-09. Last modified 2026-06-16.