The PostgreSQL project reports the following issue: When to_char() processes a numeric formatting template calling for a large number of digits, PostgreSQL would read past the end of a buffer. When processing a crafted timestamp formatting template, PostgreSQL would write past the end of a buffer. Either case could crash the server. We have not ruled out the possibility of attacks that lead to privilege escalation, though they seem unlikely. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0241
