Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-3165
HistoryMay 28, 2015 - 2:59 p.m.

CVE-2015-3165

2015-05-2814:59:06
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

9.3 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%

JSON

Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.

Affected configurations

NVD
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10
OR
canonicalubuntu_linuxMatch15.04
OR
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
applemac_os_x_serverMatch5.0.2
Node
postgresqlpostgresqlRange≤9.0.19
OR
postgresqlpostgresqlMatch9.1
OR
postgresqlpostgresqlMatch9.1.1
OR
postgresqlpostgresqlMatch9.1.2
OR
postgresqlpostgresqlMatch9.1.3
OR
postgresqlpostgresqlMatch9.1.4
OR
postgresqlpostgresqlMatch9.1.5
OR
postgresqlpostgresqlMatch9.1.6
OR
postgresqlpostgresqlMatch9.1.7
OR
postgresqlpostgresqlMatch9.1.8
OR
postgresqlpostgresqlMatch9.1.9
OR
postgresqlpostgresqlMatch9.1.10
OR
postgresqlpostgresqlMatch9.1.11
OR
postgresqlpostgresqlMatch9.1.12
OR
postgresqlpostgresqlMatch9.1.13
OR
postgresqlpostgresqlMatch9.1.14
OR
postgresqlpostgresqlMatch9.1.15
OR
postgresqlpostgresqlMatch9.2
OR
postgresqlpostgresqlMatch9.2.1
OR
postgresqlpostgresqlMatch9.2.2
OR
postgresqlpostgresqlMatch9.2.3
OR
postgresqlpostgresqlMatch9.2.4
OR
postgresqlpostgresqlMatch9.2.5
OR
postgresqlpostgresqlMatch9.2.6
OR
postgresqlpostgresqlMatch9.2.7
OR
postgresqlpostgresqlMatch9.2.8
OR
postgresqlpostgresqlMatch9.2.9
OR
postgresqlpostgresqlMatch9.2.10
OR
postgresqlpostgresqlMatch9.3
OR
postgresqlpostgresqlMatch9.3.1
OR
postgresqlpostgresqlMatch9.3.2
OR
postgresqlpostgresqlMatch9.3.3
OR
postgresqlpostgresqlMatch9.3.4
OR
postgresqlpostgresqlMatch9.3.5
OR
postgresqlpostgresqlMatch9.3.6
OR
postgresqlpostgresqlMatch9.4.0
OR
postgresqlpostgresqlMatch9.4.1

Related

amazon 3
ubuntucve 1
kaspersky 1
veracode 1
nessus 19
openvas 19
cvelist 1
postgresql 1
cve 1
prion 1
securityvulns 2
debian 7
mageia 1
redhat 3
ubuntu 1
archlinux 1
centos 1
osv 4
oraclelinux 1
freebsd 1
gentoo 1
amazon
amazon
Medium: postgresql93
2015-06-16 10:29:00
Medium: postgresql92
2015-06-16 10:29:00
Medium: postgresql8
2015-07-07 12:29:00
ubuntucve
ubuntucve
CVE-2015-3165
2015-05-22 00:00:00
kaspersky
kaspersky
KLA10592 Denial of service vulnerability in PostgreSQL
2015-05-28 00:00:00
veracode
veracode
Denial Of Service
2019-01-15 09:06:21
nessus
nessus
Amazon Linux AMI : postgresql93 (ALAS-2015-546)
2015-06-18 00:00:00
Amazon Linux AMI : postgresql92 (ALAS-2015-545)
2015-06-18 00:00:00
SUSE SLED12 / SLES12 Security Update : postgresql93 (SUSE-SU-2015:1264-1)
2015-07-21 00:00:00
openvas
openvas
PostgreSQL Remote Denial Of Service Vulnerability (Jun 2015) - Linux
2015-06-24 00:00:00
PostgreSQL Remote Denial Of Service Vulnerability (Jun 2015) - Windows
2015-06-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-545)
2015-09-08 00:00:00
cvelist
cvelist
CVE-2015-3165
2015-05-28 14:00:00
postgresql
postgresql
Vulnerability in core server (CVE-2015-3165)
2015-05-28 14:59:00
cve
cve
CVE-2015-3165
2015-05-28 14:59:06
prion
prion
Double free
2015-05-28 14:59:00
securityvulns
securityvulns
PostgreSQL multiple security vulnerabilities
2015-05-25 00:00:00
[SECURITY] [DSA 3270-1] postgresql-9.4 security update
2015-05-25 00:00:00
debian
debian
[SECURITY] [DLA-227-1] postgresql-8.4 update
2015-05-29 10:33:57
[SECURITY] [DSA 3270-1] postgresql-9.4 security update
2015-05-22 15:18:39
[SECURITY] [DSA 3269-2] postgresql-9.1 regression update
2015-05-31 04:55:56
mageia
mageia
Updated postgresql package fixes security vulnerability
2015-07-01 15:40:22
redhat
redhat
(RHSA-2015:1196) Moderate: rh-postgresql94-postgresql security update
2015-06-29 00:00:00
(RHSA-2015:1194) Moderate: postgresql security update
2015-06-29 00:00:00
(RHSA-2015:1195) Moderate: postgresql92-postgresql security update
2015-06-29 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2015-05-25 00:00:00
archlinux
archlinux
postgresql: multiple issues
2015-05-26 00:00:00
centos
centos
postgresql security update
2015-06-29 16:03:44
osv
osv
postgresql-9.4 - security update
2015-05-22 00:00:00
postgresql-8.4 - security update
2015-05-29 00:00:00
postgresql-9.1 - regression update
2015-05-22 00:00:00
oraclelinux
oraclelinux
postgresql security update
2015-06-29 00:00:00
freebsd
freebsd
PostgreSQL -- minor security problems.
2015-04-10 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2015-07-18 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

9.3 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%

JSON
Related for NVD:CVE-2015-3165
amazon3ubuntucve1kaspersky1veracode1nessus19openvas19cvelist1postgresql1cve1prion1securityvulns2debian7mageia1redhat3ubuntu1archlinux1centos1osv4oraclelinux1freebsd1gentoo1