QwikSec

Security Database

CVE

CWE

Training

CVE-2015-3166

Published: Nov 20, 2019

Modified: Aug 6, 2024

PUBLISHED

Description

The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.

Vendor	Product	Versions
PostgreSQL Global Development Group	PostgreSQL	affected `before 9.0.20` affected `9.1.x before 9.1.16` affected `9.2.x before 9.2.11` affected `9.3.x before 9.3.7` affected `and 9.4.x before 9.4.2`

References

http://www.postgresql.org/about/news/1587/

x_refsource_MISC

http://www.postgresql.org/docs/9.0/static/release-9-0-20.html

x_refsource_MISC

http://www.postgresql.org/docs/9.1/static/release-9-1-16.html

x_refsource_MISC

http://www.postgresql.org/docs/9.2/static/release-9-2-11.html

x_refsource_MISC

http://www.postgresql.org/docs/9.3/static/release-9-3-7.html

x_refsource_MISC

http://www.postgresql.org/docs/9.4/static/release-9-4-2.html

x_refsource_MISC

http://www.debian.org/security/2015/dsa-3269

x_refsource_MISC

http://www.debian.org/security/2015/dsa-3270

x_refsource_MISC

http://ubuntu.com/usn/usn-2621-1

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.