CVE-2017-15098

2017-11-2217:00:00

CWE-200

redhat

www.cve.org

AI Score

7.6

Confidence

High

EPSS

0.008

Percentile

81.2%

JSON

Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.

CNA Affected

[
  {
    "product": "postgresql",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20"
      }
    ]
  }
]