CVE catalog

CVE-2014-0063

UBUNTU-CVE-2014-0063

Severity: Unknown
Published: Feb 17, 2014, 12:00:00 AM UTC
Updated: Apr 22, 2026, 9:25:56 AM UTC
Source: [NVD] · [CVE record]
EPSS: 6.67% · Oct 25, 2026

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	postgresql-9.1	14.04	`9.1.10-1`	vulnerable
Ubuntu	postgresql-9.1	14.04	`9.1.10-1bzr1`	vulnerable
Ubuntu	postgresql-9.1	14.04	`9.1.11-1`	vulnerable
Ubuntu	postgresql-9.1	14.04	`9.1.11-2`	vulnerable
Ubuntu	postgresql-9.1	14.04	`9.1.12-1`	fixed
Ubuntu	postgresql-9.3	14.04	`9.3.1-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1ubuntu1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1ubuntu2`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.3-1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Ubuntu	postgresql-9.1	deb	14.04	`9.1.12-1`	Not reported	UBUNTU-CVE-2014-0063	Not reported
Ubuntu	postgresql-9.3	deb	14.04	`9.3.3-1`	Not reported	UBUNTU-CVE-2014-0063	Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed: Oct 23, 2026, 4:28:30 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]