CVE-2015-0242

ALTO 8.8CVE-2015-0242 · Published 27/01/2020 · updated 17/06/2026

In breve

CVE-2015-0242 è una vulnerabilità ALTO (CVSS 8.8) che riguarda postgresql (postgresql).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.1%, superiore al 92.4% delle vulnerabilità.
Correzione: aggiornare a 9.1.15, 9.2.10, 9.3.6, 9.4.1 o successiva.

Package	Affected versions	Patched versions
postgresql postgresql	`≥ 9.1.0, < 9.1.15≥ 9.2.0, < 9.2.10≥ 9.3.0, < 9.3.6≥ 9.4.0, < 9.4.1< 9.0.19`	`9.1.159.2.109.3.69.4.19.0.19`

Description

Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1, when running on a Windows system, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a floating point number with a large precision, as demonstrated by using the to_char function.

References

debian.org/security/2015/dsa-3155 · Third Party Advisory
postgresql.org/about/news/1569 · Vendor Advisory
postgresql.org/docs/9.4/static/release-9-4-1.html · Release Notes
postgresql.org/docs/current/static/release-9-0-19.html · Release Notes
postgresql.org/docs/current/static/release-9-1-15.html · Release Notes
postgresql.org/docs/current/static/release-9-2-10.html · Release Notes
postgresql.org/docs/current/static/release-9-3-6.html · Release Notes

Altre vulnerabilità di postgresql

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

postgresql

≥ 9.1.0, < 9.1.15≥ 9.2.0, < 9.2.10≥ 9.3.0, < 9.3.6≥ 9.4.0, < 9.4.1< 9.0.19

9.1.159.2.109.3.69.4.19.0.19

Description

Altre vulnerabilità di postgresql

Vedi tutto →