Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-8161
HistoryFeb 06, 2015 - 12:00 a.m.

CVE-2014-8161

2015-02-0600:00:00
ubuntu.com
ubuntu.com
15

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.002

Percentile

54.5%

JSON

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x
before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to
obtain sensitive column values by triggering constraint violation and then
reading the error message.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchpostgresql-8.4< 8.4.22-0ubuntu0.10.04.1UNKNOWN
ubuntu12.04noarchpostgresql-9.1< 9.1.15-0ubuntu0.12.04UNKNOWN
ubuntu14.04noarchpostgresql-9.1< 9.1.15-0ubuntu0.14.04UNKNOWN
ubuntu14.04noarchpostgresql-9.3< 9.3.6-0ubuntu0.14.04UNKNOWN
ubuntu14.10noarchpostgresql-9.4< 9.4.1-0ubuntu0.14.10UNKNOWN

Related

nvd 1
postgresql 1
prion 1
veracode 3
cvelist 1
cve 1
archlinux 2
osv 2
nessus 24
openvas 14
redhat 3
ubuntu 1
debian 2
centos 1
securityvulns 4
oraclelinux 1
ibm 1
amazon 2
mageia 1
freebsd 1
gentoo 1
nvd
nvd
CVE-2014-8161
2020-01-27 16:15:10
postgresql
postgresql
Vulnerability in core server (CVE-2014-8161)
2020-01-27 16:15:00
prion
prion
Code injection
2020-01-27 16:15:00
veracode
veracode
Information Disclosure
2019-01-15 09:05:07
Buffer Overflow
2019-05-02 05:12:40
SQL Injection
2019-05-02 05:12:40
cvelist
cvelist
CVE-2014-8161
2020-01-27 15:29:21
cve
cve
CVE-2014-8161
2020-01-27 16:15:10
archlinux
archlinux
[ASA-202102-31] postgresql: information disclosure
2021-02-20 00:00:00
postgresql: multiple issues
2015-02-06 00:00:00
osv
osv
postgresql-9.1 - security update
2015-02-06 00:00:00
postgresql-8.4 - new minor release
2015-02-12 00:00:00
nessus
nessus
CentOS 6 / 7 : postgresql (CESA-2015:0750)
2015-03-31 00:00:00
SUSE SLED12 / SLES12 Security Update : postgresql93 (SUSE-SU-2015:0478-1)
2015-05-20 00:00:00
Ubuntu 14.04 LTS : PostgreSQL vulnerabilities (USN-2499-1)
2015-02-12 00:00:00
openvas
openvas
CentOS Update for postgresql CESA-2015:0750 centos6
2015-03-31 00:00:00
CentOS Update for postgresql CESA-2015:0750 centos7
2015-04-01 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-503)
2015-09-08 00:00:00
redhat
redhat
(RHSA-2015:0699) Moderate: postgresql92-postgresql security update
2015-03-18 00:00:00
(RHSA-2015:0856) Moderate: postgresql92-postgresql security update
2015-04-20 00:00:00
(RHSA-2015:0750) Moderate: postgresql security update
2015-03-30 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2015-02-11 00:00:00
debian
debian
[SECURITY] [DSA 3155-1] postgresql-9.1 security update
2015-02-06 13:30:32
[SECURITY] [DLA-152-1] postgresql-8.4 update
2015-02-12 11:10:32
centos
centos
postgresql security update
2015-03-30 13:25:17
securityvulns
securityvulns
PostgreSQL multiple security vulnerabilities
2015-02-11 00:00:00
[SECURITY] [DSA 3155-1] postgresql-9.1 security update
2015-02-11 00:00:00
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00
oraclelinux
oraclelinux
postgresql security update
2015-03-30 00:00:00
ibm
ibm
Security Bulletin: PostgreSQL 9.2.8 as used in IBM QRadar SIEM 7.2.4 and IBM QRadar SIEM 7.1 MR2 is vulnerable to allow a remote authenticated attacker to obtain sensitive information. (CVE-2014-8161, CVE-2015-0241, CVE-2015-0243, CVE-2015-0244)
2018-06-16 21:25:51
amazon
amazon
Medium: postgresql8
2015-04-15 21:47:00
Medium: postgresql92
2015-03-13 02:37:00
mageia
mageia
Updated postgresql packages fix security vulnerabilities
2015-02-17 21:38:13
freebsd
freebsd
PostgreSQL -- multiple buffer overflows and memory issues
2015-02-05 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2015-07-18 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.002

Percentile

54.5%

JSON
Related for UB:CVE-2014-8161
nvd1postgresql1prion1veracode3cvelist1cve1archlinux2osv2nessus24openvas14redhat3ubuntu1debian2centos1securityvulns4oraclelinux1ibm1amazon2mageia1freebsd1gentoo1