Lucene search

K
postgresqlPostgreSQL Global Development GroupPOSTGRESQL:CVE-2015-5289
HistoryOct 26, 2015 - 2:59 p.m.

Vulnerability in core server (CVE-2015-5289)

2015-10-2614:59:00
PostgreSQL Global Development Group
www.postgresql.org
534

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.018 Low

EPSS

Percentile

86.6%

Unchecked JSON input can crash the server

CPENameOperatorVersion
postgresqllt9.4.5
postgresqllt9.3.10

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.018 Low

EPSS

Percentile

86.6%