CVE-2007-4772: Canonical Ubuntu Linux

Medium severity, CVSS 4.0. EPSS: 3.8% chance of exploitation in the next 30 days.

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only; version 7.10 only
• Debian Debian Linux: version 3.1 only
• PostgreSQL PostgreSQL: from 7.4, before 7.4.19 (fixed in 7.4.19); from 8.0, before 8.0.15 (fixed in 8.0.15); from 8.1, before 8.1.11 (fixed in 8.1.11); from 8.2, before 8.2.6 (fixed in 8.2.6)
• Tcl Tcl/tk: before 8.4.17 (fixed in 8.4.17)

Published 2008-01-09. Last modified 2026-06-16.