USN-2772-1 postgresql-9.1, postgresql-9.3, postgresql-9.4 vulnerabilities

🗓️ 16 Oct 2015 06:12:30Reported by GoogleType

osv

osv🔗 osv.dev

PostgreSQL pgCrypto memory exposure from short salt and json jsonb stack exhaustion causing denial of service.

Reporter	Title	Published	Views	Family All 132
IBM Security Bulletins	Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)	16 Jun 201821:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager version 9 is affected by a vulnerability in postgreSQL (CVE-2015-5288)	16 Jun 201821:45	–	ibm
Tenable Nessus	PostgreSQL 9.0 < 9.0.23 / 9.1 < 9.1.19 / 9.2 < 9.2.14 / 9.3 < 9.3.10 / 9.4 < 9.4.5 Multiple Vulnerabilities	22 Apr 201600:00	–	nessus
Tenable Nessus	PostgreSQL 9.3 < 9.3.10 / 9.4 < 9.4.5 DoS	22 Apr 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : postgresql92 / postgresql93,postgresql94 (ALAS-2015-609)	6 Nov 201500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : postgresql8 (ALAS-2015-619)	15 Dec 201500:00	–	nessus
Tenable Nessus	CentOS 7 : postgresql (CESA-2015:2078)	19 Nov 201500:00	–	nessus
Tenable Nessus	CentOS 6 : postgresql (CESA-2015:2081)	19 Nov 201500:00	–	nessus
Tenable Nessus	Debian DLA-329-1 : postgresql-8.4 update	20 Oct 201500:00	–	nessus
Tenable Nessus	Debian DSA-3374-1 : postgresql-9.4 - security update	20 Oct 201500:00	–	nessus

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-2772-1
ubuntu	www.ubuntu.com/security/CVE-2015-5288
ubuntu	www.ubuntu.com/security/CVE-2015-5289

22 Apr 2026 09:17Current

6.9Medium risk

Vulners AI Score6.9

CVSS 26.4

EPSS0.08949

postgresql pgCrypto memory exposure json jsonb denial of service