CVE-2009-0922: PostgreSQL

Medium severity, CVSS 4.0. EPSS: 10.2% chance of exploitation in the next 30 days.

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.

Affected products

• PostgreSQL PostgreSQL: version 7.4.24 only; version 8.0.20 only; version 8.1.16 only; version 8.2.12 only; version 8.3.6 only

Published 2009-03-17. Last modified 2026-06-16.