The vulnerability of the PostgreSQL database management system allows a attacker to cause a service failure or read arbitrary portions of the server’s memory.

🗓️ 20 Nov 2015 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

PostgreSQL vulnerabilities can crash the service or read memory, including pgcrypto crypt function data exposure.

Reporter	Title	Published	Views	Family All 115
IBM Security Bulletins	Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)	16 Jun 201821:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager version 9 is affected by a vulnerability in postgreSQL (CVE-2015-5288)	16 Jun 201821:45	–	ibm
Tenable Nessus	PostgreSQL 9.0 < 9.0.23 / 9.1 < 9.1.19 / 9.2 < 9.2.14 / 9.3 < 9.3.10 / 9.4 < 9.4.5 Multiple Vulnerabilities	22 Apr 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : postgresql92 / postgresql93,postgresql94 (ALAS-2015-609)	6 Nov 201500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : postgresql8 (ALAS-2015-619)	15 Dec 201500:00	–	nessus
Tenable Nessus	CentOS 7 : postgresql (CESA-2015:2078)	19 Nov 201500:00	–	nessus
Tenable Nessus	CentOS 6 : postgresql (CESA-2015:2081)	19 Nov 201500:00	–	nessus
Tenable Nessus	Debian DLA-329-1 : postgresql-8.4 update	20 Oct 201500:00	–	nessus
Tenable Nessus	Debian DSA-3374-1 : postgresql-9.4 - security update	20 Oct 201500:00	–	nessus
Tenable Nessus	Debian DSA-3475-1 : postgresql-9.1 - security update	15 Feb 201600:00	–	nessus

Vulners

Node

postgresql postgresqlRange9.4.0–9.4.5

OR

postgresql postgresqlRange<9.0.23

OR

postgresql postgresqlRange9.1.0–9.1.19

OR

postgresql postgresqlRange9.2.0–9.2.14

OR

postgresql postgresqlRange9.3.0–9.3.10

Source	Link
securitytracker	www.securitytracker.com/id/1033775
postgresql	www.postgresql.org/docs/9.4/static/release-9-4-5.html
postgresql	www.postgresql.org/docs/9.3/static/release-9-3-10.html
postgresql	www.postgresql.org/docs/9.2/static/release-9-2-14.html
postgresql	www.postgresql.org/docs/9.1/static/release-9-1-19.html
postgresql	www.postgresql.org/docs/9.0/static/release-9-0-23.html
postgresql	www.postgresql.org/about/news/1615/
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-October/169094.html
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7High risk

Vulners AI Score7

CVSS 26.4

EPSS0.08949

postgresql vulnerability service crash risk memory reading risk pgcrypto vulnerability crypt function issue