CVE-2009-2943

The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.

View graph Watch Export

CVSS v3.1

—

EPSS

2.21%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

1 relationships

postgresql-ocaml

source

Timeline

disclosure → media coverage

Oct 22, 2009

Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026