| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 9.1= 9.1.1= 9.1.10= 9.1.11= 9.1.12= 9.1.13= 9.1.14= 9.1.15= 9.1.16= 9.1.17= 9.1.18= 9.1.2= 9.1.3= 9.1.4= 9.1.5= 9.1.6= 9.1.7= 9.1.8= 9.1.9= 9.2= 9.2.1= 9.2.10= 9.2.11= 9.2.12= 9.2.13= 9.2.2= 9.2.3= 9.2.4= 9.2.5= 9.2.6= 9.2.7= 9.2.8= 9.2.9= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.3.5= 9.3.6= 9.3.7= 9.3.8= 9.3.9= 9.4.0= 9.4.1= 9.4.2= 9.4.3= 9.4.4≤ 9.0.22 |
The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free