QwikSec

Security Database

CVE

CWE

Training

CVE-2015-3165

Published: May 28, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

http://www.postgresql.org/about/news/1587/

x_refsource_CONFIRM

http://www.postgresql.org/docs/9.0/static/release-9-0-20.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

http://www.postgresql.org/docs/9.4/static/release-9-4-2.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_DEBIAN

http://www.postgresql.org/docs/9.2/static/release-9-2-11.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_DEBIAN

http://www.postgresql.org/docs/9.1/static/release-9-1-16.html

x_refsource_CONFIRM

APPLE-SA-2015-09-16-4

vendor-advisory

x_refsource_APPLE

http://www.postgresql.org/docs/9.3/static/release-9-3-7.html

x_refsource_CONFIRM

https://support.apple.com/HT205219

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.