CVE-2007-4772: canonical ubuntu_linux Resource Management Errors

Modified

Published 09-01-2008Last modified 07-08-2024

Vulnerability summary

CVE-2007-4772 is a medium (CVSS 4.0) Resource Management Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 3.81% chance of exploitation in the next 30 days, higher than 90% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.0/10

010

Medium · v2.0 (NVD)

EPSS score

3.81%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 12 · Related 6

DSA-1460-1 DSA-1463-1 OPENSUSE-SU-2024:10030-1 OPENSUSE-SU-2024:10256-1 OPENSUSE-SU-2024:10273-1 RHSA-2008:0038+6 more

Timeline

09-01-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

CVSS metrics

1 score · 1 source · 1 version

v2.04.0

EPSS trend

Probability

3.81%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.81% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (sourceforge.net)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.

Affected systems

Version check

Known conditions: network-reachable, authentication (CVSS vector). Other conditions: not stated in public data.

Canonical1 product

ubuntu_linuxEOL6.06 | 6.10 | 7.04 | 7.10

Debian1 product

debian_linuxEOL3.1

Postgresql1 product

postgresql≥ 7.4, < 7.4.19 | ≥ 8.0, < 8.0.15 | ≥ 8.1, < 8.1.11 | ≥ 8.2, < 8.2.6

Tcl1 product

tcl\/tk< 8.4.17

4 vendors · 4 products

References

53 links

lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-0134.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:004Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.debian.org/security/2008/dsa-1460Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.vupen.com/english/advisories/2008/1744VDB EntryX Refsource VUPENBroken Link
lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-0122.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/bid/27163VDB EntryX Refsource BIDPatchThird Party Advisory
issues.rpath.com/browse/RPL-1768X Refsource CONFIRMBroken Link

Show all 53 references

www.redhat.com/support/errata/RHSA-2008-0038.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/28454Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/485864/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/28359Third Party AdvisoryX Refsource SECUNIA
www.postgresql.org/about/news.905X Refsource CONFIRMVendor Advisory
lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.vupen.com/english/advisories/2008/0061VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/28679Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0109VDB EntryX Refsource VUPENThird Party Advisory
www.vmware.com/security/advisories/VMSA-2008-0009.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/28376Third Party AdvisoryX Refsource SECUNIA
sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894X Refsource CONFIRMExploitThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/28437Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28455Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28477Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29638Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28479Third Party AdvisoryX Refsource SECUNIA
sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/29248Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/39497VDB EntryX Refsource XFThird Party Advisory
www.debian.org/security/2008/dsa-1463Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-0040.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.securityfocus.com/archive/1/486407/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.mandriva.com/security/advisories?name=MDVSA-2008:059Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/28464Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30535Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28698Third Party AdvisoryX Refsource SECUNIA
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154Vendor AdvisoryX Refsource HPBroken Link
sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.securityfocus.com/archive/1/493080/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
usn.ubuntu.com/568-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
secunia.com/advisories/29070Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28438Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1019157VDB EntryX Refsource SECTRACKThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10705X Refsource CONFIRMThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569VDB EntrySignatureX Refsource OVALThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
security.gentoo.org/glsa/glsa-200801-15.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.vupen.com/english/advisories/2008/1071/referencesVDB EntryX Refsource VUPENThird Party Advisory