Lucene search

K
kasperskyKaspersky LabKLA10592
HistoryMay 28, 2015 - 12:00 a.m.

KLA10592 Denial of service vulnerability in PostgreSQL

2015-05-2800:00:00
Kaspersky Lab
threats.kaspersky.com
25

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.085 Low

EPSS

Percentile

94.3%

Detect date:

05/28/2015

Severity:

Warning

Description:

Multiple serious vulnerabilities have been found in PostgreSQL. Malicious users can exploit these vulnerabilities to cause denial of service or conduct some other impact.

Affected products:

PostgreSQL versions earlier than 9.0.20
PostgreSQL 9.1 versions earlier than 9.1.16
PostgreSQL 9.2 versions earlier than 9.2.11
PostgreSQL 9.3 versions earlier than 9.3.7
PostgreSQL 9.4 versions earlier than 9.4.2

Solution:

Update to the latest version
Get PostgreSQL

Original advisories:

PostrgeSQL blog entry

Impacts:

DoS

Related products:

PostgreSQL

CVE-IDS:

CVE-2015-31654.3Warning

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.085 Low

EPSS

Percentile

94.3%