Denial of Service Issue in PostGIS with PostgreSQL
CVE-2017-18359

7.5HIGH

Key Information:

Vendor: Postgis
Status: Postgis
Vendor: CVE Published:; 25 January 2019

What is CVE-2017-18359?

PostGIS versions prior to 2.3.3 allow remote attackers to exploit a denial of service vulnerability. This is achieved by sending crafted inputs to the ST_AsX3D function, notably when executing commands such as 'SELECT ST_AsX3D('LINESTRING EMPTY');'. Improper handling of empty geometries can lead to abnormal termination of the server, thereby disrupting service availability. Users and administrators should consider upgrading to the latest version to mitigate this risk.