CVE-2007-6067: PostgreSQL

Medium severity, CVSS 6.8. EPSS: 3.9% chance of exploitation in the next 30 days.

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.

Affected products

• PostgreSQL PostgreSQL: version 7.3 only; version 7.3.1 only; version 7.3.2 only; version 7.3.3 only; version 7.3.4 only; version 7.3.6 only; …
• Tcl Tk Tcl Tk: up to and including 8.4.16

Published 2008-01-09. Last modified 2026-06-16.