Lucene search

RedhatCVE-2016-3065

HistoryApr 11, 2016 - 3:59 p.m.

CVE-2016-3065

2016-04-1115:59:06

CWE-264

redhat

web.nvd.nist.gov

cve

2016

3065

postgresql

access restrictions

security vulnerability

nvd

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:N/A:C

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

8.7

Confidence

High

EPSS

0.004

Percentile

74.5%

JSON

The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.

Affected configurations

Nvd

Node

postgresqlpostgresqlMatch9.5

postgresqlpostgresqlMatch9.5.1

VendorProductVersionCPE
postgresqlpostgresql9.5cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*
postgresqlpostgresql9.5.1cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*